# AI assumes a Finnish personal identity code alone grants access to Suomi.fi digital government services via strong authentication

- **ID:** `banking/suomi-fi-strong-auth-not-automatic`
- **Domain:** banking
- **Category:** administrative_barrier
- **Verification:** ai_generated
- **Fix Rate:** 75%

## Root Cause

Suomi.fi (Finland's digital-services portal) requires one of a short list of strong-authentication tools: bank-issued online banking credentials, a telecom mobile certificate, the hightrust.id app, or a DVV certificate card. A Finnish personal identity code (hetu) is a prerequisite to apply for these but is not itself a login credential. The mobile certificate route is a dead end for newcomers because it requires already holding Finnish bank credentials plus a postpaid mobile subscription, so opening a bank account in person is the practical first step to strong authentication.

## Version Compatibility

| Version | Status | Introduced | Deprecated |
|---------|--------|------------|------------|
| any | active | — | — |

## Workarounds

1. **Open a Finnish bank account in person, using your hetu, passport, and proof of address, to obtain bank-issued online banking credentials (pankkitunnukset) - the fastest route to a first strong-authentication tool** (85% success)
   ```
   Once you hold pankkitunnukset you can also activate a mobile certificate with a postpaid subscription if you want a second authentication tool for your phone.
   ```
2. **If you do not yet have a hetu at all, use DVV's Finnish Authenticator app for remote identity verification into a limited set of e-services such as Suomi.fi e-Authorizations** (60% success)
   ```
   Register a foreigner identifier and verify identity with a passport photo and a selfie inside the app; DVV notes this method does not meet the eIDAS 'high' assurance level, so some services will still be out of reach.
   ```

## Dead Ends

- **Try to activate a mobiilivarmenne (mobile certificate) as the first strong-authentication method, before holding a Finnish bank account** — Suomi.fi's own setup instructions state you need 'suomalaiset pankkitunnukset, jotka tarvitset henkilollisyytesi todentamiseen kayttoonoton yhteydessa' (Finnish bank credentials, needed to verify your identity during setup) to activate a mobile certificate, and that a prepaid subscription disqualifies you - only postpaid plans from DNA, Elisa, or Telia are accepted. It cannot be anyone's entry point into strong authentication. (90% fail)
- **Assume a Finnish personal identity code by itself lets you log into Suomi.fi e-services** — Suomi.fi lists the accepted strong-authentication tools as Finnish bank credentials, mobile certificate, the hightrust.id app, or a DVV certificate card; a hetu lets you apply for these but grants no login on its own. (70% fail)