Addressing signers

You may address signers for portal flow in two different ways:

  1. By email and/or SMS (only available for private organizations)

  2. By national identity number

Caution

How you choose to address the signer(s) affects the content and appearance of the signature(s) in the resulting signed document.

1. Addressing signers by e-mail / SMS

Note

This option is only available for private organizations

When addressing signers by email/SMS, we will not be able to link signers to their national identity number. Therefore, we do not have any way to verify that the correct person is reading and signing. The recipients receive an email and/or SMS with a unique code and link to access the document(s) to sign, instead of being required to log in. See notifications to review what the notifications look like.

Important

The signature itself is just as secure and valid as when you address using national identity number, but you as the sender are responsible for ensuring that the correct person reads and signs.

In the case of e-mail/SMS addressing, the national identity number will not be included in the signed document for privacy reasons. Name and any date of birth will continue to be included in the signed document.

See Signing in portal flow with addressing by e-mail / SMS for more information and visual examples.

2. Addressing signers by their national identity number

If you know the national identity numbers of the signers, you can address them using their identity numbers. This is the most secure way to reach the expected recipients, since it requires them to log in with an electronic ID in order to read and sign.

Even if the signer is addressed using a national identity number, the signer will be notified and will receive a link to log in by email or SMS – see notification and contact details for more information..

Tip

See signing in portal flow with national identity number for more information and visual examples.

Notifications and contact details

When you select signing in portal flow, emails and/or SMS notifications are sent to the signers.

  • All signers must have at least one email address and mobile number.

  • Sending an SMS is voluntary and can be ordered by the service owner, at a cost of NOK 40 cents per SMS.

  • If a signer has a mobile number and not an email address, an SMS will always be sent.

For private organizations

If the sender is a private organization, you must yourself enter the email address and/or mobile number of the recipient. This also applies if you address the signer using national identity number. Private organizations cannot use KRR.

For public organizations

For public organizations, we obtain the signer’s email address and mobile phone number from the Contact and Reservation Register (KRR). Public organizations can only define their own contact details for a signer if the signer is to sign on behalf of an organization.

Caution

If signers have opted out of digital communication, the task will be rejected and subsequent retrieval of the status of the task will report an error with details of which signers have opted out. Signers with overridden contact details will not be checked for opt-out.

Using the Contact and Reservation Register

Further details concerning the use of the Contact and Reservation Register

On sending out subsequent notifications (either deferred activation due to chained signature, or reminders) a new lookup is made in the register to retrieve the latest updated contact details.

If the Lookup Service for the Contact and Reservation Register is unavailable when reminders are sent, the result of the lookup on creating the request will be used.

Opt-out concerning deferred initial notifications: In the scenario where the service owner has set a chained sequence for the signers, and the initial notification is to be sent to a signer who, in the period between creation of the request and sending the initial notification, has opted out of electronic communication, the entire request will fail.

Opt-out concerning reminders: If the end user has opted out after the request was created, but the request has already been activated, no reminders (email/text message) will be sent, but the request will not fail either until any expiry of the signing deadline.