General description of SMHI's authentication services

SMHI’s authentication services provides authentication of users which have an electronic identity at SMHI, together with release of attributes pertaining to the authenticated user.

SMHI is a member of SWAMID, the Swedish identity federation for Research and higher education. SMHI’s authentication services has been deployed in accordance with SWAMID’s policy framework.

Policy for personal integrity

SMHI’s authentication services performs authentication at the request of a service which SMHI recognizes, either via metadata provided by the SWAMID identity federation or because the service and SMHI has a specific agreement. Depending upon the type of service involved, the purpose of the service and what relationship the service has to the SMHI’s authentication services, one or more pieces of personal data are transferred from SMHI’s catalogue and authorization system to the requesting service. This procedure follows the intent of the General Data Protection Regulation (GDPR).

Services that are categorized in SWAMID’s metadata with entity categories receive attributes in accordance with SWAMID’s recommendations.

Services whose primary purpose is for the benefit of research and education have access to approximately the same personal data which are automatically sent with an everyday e-mail, which being name, e-mail address, user identity, the user's relationship to SMHI (employee or similar active role) and that the user has an account at SMHI.

Registered services that via REFEDS Data Protection Code of Conduct, and the older GÉANT Data Protection Code of Conduct, adhere to the European Union’s General Data Protection Regulation (GDPR) get access to the same information.

REFEDS Data Protection Code of Conduct External link.

GÉANT Data Protection Code of Conduct External link.

The service adheres to the policy for the handling of personal data (link to policy) which has been published by SMHI in accordance with Swedish law.

SMHI’s authentication services and it´s limitations

SMHI undertakes to guarantee the availability of the service in accordance with SMHI’s requirements and expectations. SMHI follows SWAMID’s recommendations for release of attributes based upon entity categories. SMHI reserves the right, in agreement with a service provider, to change the actually released attributes for the current service, regardless of what is recommended by the entity category for which the service provider is approved.

Service and support

Questions and faults regarding SMHI’s authentication services should be directed to the following local support channels:

Phone: 011-495 82 00

E-mail: kundtjanst@smhi.se