Singpass

Singapore's eID https://www.singpass.gov.sg/main/arrow-up-right

Verify

post

Verify

Authorizations
x-client-idstringRequired

Client ID in x-client-id header.

x-client-secretstringRequired

Client Secret in x-client-secret header.

Body
redirectstringRequired

Redirect URI after user authorization.

Browser: https URL to your website.

Mobile: Universal link (your-app://) or app scheme.

Example: https://www.yourwebsite.com/callback
typestring · enumOptional

QR code type

Possible values:
startinteger · int64Optional

Start timestamp in milliseconds (must be >= current time)

endinteger · int64Optional

End timestamp in milliseconds (must be > start time)

durationinteger · min: 1Optional

Duration in milliseconds (positive integer)

responseFormatstring · enumOptional

Format of the response (url, qr, or both)

Default: bothPossible values:
Responses
chevron-right
200

Success

application/json
tokenstringRequired

JWT token for polling

urlstringOptional

Singpass verification URL

qrUrlstringOptional

QR code data URL

post
/sgid/request/qr

MyInfo

post

MyInfo enables relying party to retrieve personal details.

Authorizations
x-client-idstringRequired

Client ID in x-client-id header.

x-client-secretstringRequired

Client Secret in x-client-secret header.

Body
attributesstring[]Required

attributes to be requested from user

redirectstringRequired

Redirect URI after user authorization.

Browser: https URL to your website.

Mobile: Universal link (your-app://) or app scheme.

Example: https://www.yourwebsite.com/callback
Responses
chevron-right
200

Success

application/json
tokenstringOptional
urlstringOptional
post
/sgid/request/auth

MyInfo Business

post

enables business-to-business use case for retrieval of corporate data and applicant's personal data.

Authorizations
x-client-idstringRequired

Client ID in x-client-id header.

x-client-secretstringRequired

Client Secret in x-client-secret header.

Body
attributesstring[]Optional

attributes to be requested from user

redirectstringOptional

Redirect URI after user authorization.

Browser: https URL to your website.

Mobile: Universal link (your-app://) or app scheme.

Example: https://www.yourwebsite.com/callback
Responses
chevron-right
200

Success

application/json
urlstringOptional
tokenstringOptional
post
/sgid/request/auth-biz
200

Success

MyInfo Redirect

get

This is the URL that /sgid/request/auth returns. It stores a cookie on the user's browser and redirects to Singpass authorization site.

Query parameters
client_idstringRequired
code_challengestringRequired
scopestringOptional

v4 flow — space-separated scopes forwarded to /auth.

redirect_uristringOptional

v4 flow — callback URL forwarded to /auth. Passed through without re-encoding.

request_uristringOptional

v5 (FAPI 2.0) flow — opaque reference returned by the PAR endpoint (e.g. a URN).

Responses
get
/sgid/redirect
302

Redirect to Singpass authorization

No content

MyInfo Callback

get

This is the callback URL that Singpass redirects to after user authorizes the data request.

Query parameters
codestringOptional
statestringOptional
errorstringOptional
error_descriptionstringOptional
Responses
get
/sgid/callback/person
302

Redirect to client application

No content

Biz Callback

get

This is the callback URL that Singpass redirects to after user authorizes the data request.

Responses
get
/sgid/callback/person-biz
302

Redirect to client application

No content

Verify Callback

get

This is the callback URL that Singpass redirects to after user authorizes the data request.

Responses
get
/sgid/callback/verify
302

Redirect to client application

No content

jwks.json

get
Responses
chevron-right
200

JWK Set

application/json
get
/sgid/jwks.json
200

JWK Set

Poll Data

post

That endpoint is used to obtain the requested data.

Authorizations
x-client-idstringRequired

Client ID in x-client-id header.

x-client-secretstringRequired

Client Secret in x-client-secret header.

Body
tokenstringRequired

The token received on the first request.

Example: 2dmR0VVufvic0vrVIluVBVi1EXtkCwIZ331as0Em
Responses
chevron-right
200

OK - Data successfully retrieved

application/json
messagestringOptional

Status message

urlstringOptional

URL that should be shown to the user (usually as a QR code)

tokenstringOptional

Used to poll requested data

post
/sgid/callback/client

Last updated