Start here · Step 3

Select identity access

Define the maximum identity information your application may request, then request only the subset required for each authorization purpose.

Set the application boundary

Allowed scopes are the application ceiling. A request can ask for fewer scopes, but never more. The person still decides what to approve, and unavailable information is omitted.

openid
profile
email
identity_verified
age_over_18

Use the smallest useful scope

Prefer age_over_18 to a full birth date, one verified email to all emails, and masked document identifiers to complete document numbers.

Document access

If your product needs documents, select exact issuing countries, document types, and permitted fields. New catalogue entries are never added to an application automatically.

Use the Scopes reference for every supported scope and the country catalogue for current document availability.