AI assumes a Finnish personal identity code alone grants access to Suomi.fi digital government services via strong authentication
ID: banking/suomi-fi-strong-auth-not-automatic
Version Compatibility
| Version | Status | Introduced | Deprecated | Notes |
|---|---|---|---|---|
| any | active | — | — | — |
Root Cause
Suomi.fi (Finland's digital-services portal) requires one of a short list of strong-authentication tools: bank-issued online banking credentials, a telecom mobile certificate, the hightrust.id app, or a DVV certificate card. A Finnish personal identity code (hetu) is a prerequisite to apply for these but is not itself a login credential. The mobile certificate route is a dead end for newcomers because it requires already holding Finnish bank credentials plus a postpaid mobile subscription, so opening a bank account in person is the practical first step to strong authentication.
genericWorkarounds
-
85% success Open a Finnish bank account in person, using your hetu, passport, and proof of address, to obtain bank-issued online banking credentials (pankkitunnukset) - the fastest route to a first strong-authentication tool
Once you hold pankkitunnukset you can also activate a mobile certificate with a postpaid subscription if you want a second authentication tool for your phone.
-
60% success If you do not yet have a hetu at all, use DVV's Finnish Authenticator app for remote identity verification into a limited set of e-services such as Suomi.fi e-Authorizations
Register a foreigner identifier and verify identity with a passport photo and a selfie inside the app; DVV notes this method does not meet the eIDAS 'high' assurance level, so some services will still be out of reach.
Sources: https://dvv.fi/en/finnish-authenticator-identification-service1
Dead Ends
Common approaches that don't work:
-
Try to activate a mobiilivarmenne (mobile certificate) as the first strong-authentication method, before holding a Finnish bank account
90% fail
Suomi.fi's own setup instructions state you need 'suomalaiset pankkitunnukset, jotka tarvitset henkilollisyytesi todentamiseen kayttoonoton yhteydessa' (Finnish bank credentials, needed to verify your identity during setup) to activate a mobile certificate, and that a prepaid subscription disqualifies you - only postpaid plans from DNA, Elisa, or Telia are accepted. It cannot be anyone's entry point into strong authentication.
-
Assume a Finnish personal identity code by itself lets you log into Suomi.fi e-services
70% fail
Suomi.fi lists the accepted strong-authentication tools as Finnish bank credentials, mobile certificate, the hightrust.id app, or a DVV certificate card; a hetu lets you apply for these but grants no login on its own.