SkyWinOne — Login with BankID

With BankID switched on, the login page of SkyWin^One shows a BankID QR code beside the usual username and password. On a mobile phone there is also an Open BankID button, which opens the BankID app on the same phone.

When a member has identified themselves, SkyWin^One looks up the member whose personal identity number matches, logs them in with their personal login and shows their personal page — account balance, log book, transactions and jump queue.

• A member who has no personal login yet is given one automatically at their first BankID login. Nobody has to create logins in advance.
• Only personal logins are used. Staff logins — administrators, manifest, finance — still log in with username and password, even when they belong to the same person.
• When BankID is switched on, the start page and the jump queue also show a QR code that takes a phone straight to the login page: Want to see your account balance and jumps?

The identification itself is done by Idura, who connect to BankID on the club's behalf. Each club needs an Idura account of its own. The five steps below take you from signing up at Idura to the first member logging in — allow two to three weeks, most of it waiting for the BankID certificate.

Sign up at Idura and create a tenant — your club's own space at Idura. Idura's own guide is Set up the Dashboard.

1. Switch the Idura Dashboard to Production (top left). Everything in the steps below is done there.
2. On the Billing tab, buy a subscription. Idura charges for successful logins only — see their price list.

Open the Domains tab and register a domain, for example yourclub.idura.broker.

This is the Idura domain you enter in SkyWin^One in step 5.

Before BankID can be used, Idura must install a certificate that identifies your club. Order it now: it is the step that takes longest, and steps 4 and 5 can be done while you wait.

1. Open the Swedish BankID page in the Idura Dashboard and fill in the order form. You need the club's EU VAT ID and the domain from step 2.
2. Idura review the order and forward it to Swedbank for approval, then install the certificate in your tenant. Allow 8–15 working days; the Dashboard shows how the order stands.

Idura's own guide is Swedish BankID, under Order Swedish BankID.

Open the Applications tab and create a new Verify application:

When the application is created, Idura shows the client secret once. Copy it straight away and keep it somewhere safe: Idura only keeps a scrambled copy, and if you navigate away without copying it you have to generate a new one (OpenID Connect section of the application, Enable OAuth2 Code Flow).

The client secret goes in the properties file, where it never appears on any page. The domain and the Client ID are set inside SkyWin^One, by an administrator.

When all three — domain, Client ID and secret — are in place, the login page shows the BankID QR code. Until then SkyWin^One works exactly as before.

Check it: once Idura has installed the certificate, log in once with your own BankID — as a member whose record carries your personal identity number. You should land on that member's personal page.

SkyWin^One uses the personal identity number BankID returns only to find the member; it does not store it or anything else from the identification. The identification itself passes through Idura, so the club's agreement with Idura covers how they handle it.