The scopes supported by an operator will be defined in the scopes_supported parameter of the Mobile Connect Provider Metadata or in the Discovery response links array. All scope values MUST include the openid scope and optionally one or more of the other scope values.

The following table list the scope values that may be available to use.

Scope Product Profile Description
openid Authentication v1.1 Authentication must be executed.
mc_authn Authentication v2.0
DI v2.3
SI v1.0
Mobile Connect Authentication must be executed.
mc_authz Authorisation v2.0
DI v2.3
SI v1.0
Mobile Connect Authorisation must be executed.
mc_identity_signup Identity v2.0
DI v2.3
SI v1.0
Execute authentication and capture consent for sign up details.
mc_identity_phonenumber Identity v2.0
DI v2.3
SI v1.0
Execute authentication and capture consent for Mobile Connect enabled phone number.
mc_identity_nationalid Identity v2.0
DI v2.3
SI v1.0
Execute authentication and capture consent for National ID.
mc_kyc_plain Identity DI v2.3
SI v1.0
Execute authentication and capture consent for KYC Match.
mc_kyc_hashed Identity DI v2.3
SI v1.0
Execute authentication and capture consent for KYC Match.
mc_atp Identity SI v1.0 Execute authentication and Account Takeover Protection.
profile * N/A v1.1 This requests that access to the End-User’s profile Claims excluding the address and email Claims at the UserInfo Endpoint be granted by the issued Access Token.
email * N/A v1.1 This requests that access to the email and verified Claims at the UserInfo Endpoint be granted by the issued Access Token.
address * N/A v1.1 This requests that access to address Claim at the UserInfo Endpoint be granted by the issued Access Token.
phone * N/A v1.1 This requests that access to the phone_number Claim at the UserInfo Endpoint be granted by the issued Access Token.
offline_access * N/A v1.1 This scope value requests that an OAuth 2.0 Refresh Token be issued that can be used to obtain an Access Token that grants access to the End-User's UserInfo Endpoint even when the End-User is not present (not logged in).

 

Scopes marked with * are not part of Mobile Connect but may be supported by some operators

Country specific scope values

Some countries support scope values which are specific to the country implementation. Details of these scopes can be found in the Country specific variations section.