Maskinporten¶

This is not a connector, but is used as authentication by several integrations.

Maskinporten is a common OpenID Connect provider in Norwegian public sektor, used for machine to machine authentication to services like Altinn, Helsepersonellregisteret, SAP from DFØ and others. To allow Fortytwo access, you need to register an application in Maskinporten using the below steps.

Steps¶

Sign into Samarbeidsportalen and find Integrations ("Integrasjoner")

New integrations button

On the New integration ("Ny integrasjon") experience, select the scopes you need to provide Fortytwo access to. This varies with the connector.

Select scopes

This is an example for accessing DFØ SAP:

SAP DFØ Example

Use the following information:

Setting	Value
Application type / Applikasjonstype	Web
Allowed grant types / Tillatte grant types	urf:ietf:params:oauth:grant-type:jwt-bearer
Client auth method / Klientautentiseringsmetode	private_key_jwt

alt text

After adding the application, use add your own public keys ("Egne public nøkler").

To get your JWKS, submit the below form with your Entra tenant ID, which you can find at whatismytenantid.com

alt text

It should now look something like this:

alt text

The Client ID of the application must be provided in the connector configuration.

Maintenance¶

Maskinporten only accepts certificate validity for 1 year. To ensure availability of the service, we generate a new certificate every 6 months, but continue to use the 'oldest' certificate until it is no longer valid. As a customer, you need to update the JWKS every 6 months, by submitting the above form to get the latest certificate(s) and saving them in the Maskinporten user interface.