Initiates the authentication flow with SPID, CIE, or EIDAS by redirecting the user to the identity provider.
The previous endpoint /{environment_name}/login_file.php is deprecated. Use the endpoints below instead.
For the full technical reference, see the OpenAPI specification.
| Method | URL | Identity scheme |
|---|---|---|
GET | /{environment_name}/spidlogin | SPID / EIDAS |
GET | /{environment_name}/cielogin | CIE |
GET | /{environment_name}/cnslogin | CNS |
| Name | Type | Required | Description |
|---|---|---|---|
environment_name | string | Yes | The environment path provided by Namirial during the assessment phase (e.g. myintegration) |
| Name | Type | Required | Description |
|---|---|---|---|
authnKey | string | Yes | The session key obtained from the Get key endpoint |
final | string | Yes | Redirect URL called at the end of the authentication process (defined during the assessment phase) |
reference | string | No | Alphanumeric string (max 50 characters) used to tag the authentication request. Returned in the JWT |
SPID / EIDAS
GET /{environment_name}/spidlogin
?authnKey=<authnKey>
&final=https://your-app.example.com/callbackCIE
GET /{environment_name}/cielogin
?authnKey=<authnKey>
&final=https://your-app.example.com/callbackCNS
GET /{environment_name}/cnslogin
?authnKey=<authnKey>
&final=https://your-app.example.com/callbackThe constructed URL must be opened in a browser. The user will be presented with the identity provider login screen.
Redirect — Authentication successful
The user is redirected to the final URL with sessionid and sessionkey query parameters appended. Call the Get user token endpoint to retrieve the JWT.
cnslogin returns a JWT directly as a token query parameter in the redirect, instead of sessionid and sessionkey. The Get user token step is not required for CNS authentication.