FranceConnect is the French government's central identity aggregator. Instead of authenticating users itself, it forwards sign-in to trusted public-service accounts (impots.gouv.fr, ameli, La Poste, etc.) and returns a verified identity to your application. Authdog fronts it as a first-class enterprise OIDC connector, which lets parents and citizens sign in through FranceConnect with one connection.
Copy the redirect URI
In the Authdog console, select the project and environment, find FranceConnect (the Federation filter is pre-selected by this link), and click Enable. Copy the redirect URI shown in the form:
https://identity.authdog.com/api/v1/callback/<connectionId>Register with FranceConnect
FranceConnect access is provisioned by the DGNum operator for eligible public-service and education partners.
- Request a client from the FranceConnect operator for the integration environment, then production.
- Provide the redirect URI from Authdog as a registered redirect URI.
- The operator returns a Client ID, Client Secret, and the OIDC discovery URL for the environment.
FranceConnect distinguishes an integration environment from production. Keep one Authdog connection per environment and use email domains or connection names to tell them apart.
Configure Authdog
| Field | Value |
|---|---|
| Connection name | A label that identifies this FranceConnect connection, e.g. franceconnect-prod |
| OIDC discovery URL | The discovery document URL supplied by the FranceConnect operator |
| Client ID | The client identifier issued by FranceConnect |
| Client secret | The client secret issued by FranceConnect |
| Scopes | openid profile email plus any FranceConnect-required scopes |
| Email domains | The discovery domains that should route to this connection |
Save, then toggle the connection active.
What FranceConnect returns
Authdog requests the openid profile email scopes and reads the normalized profile from the ID token and the userinfo endpoint. FranceConnect returns a verified identity and the level of assurance (acr) used for the sign-in, which you can read from the token claims.
Test it
- Open your environment's hosted sign-in page, or link to
https://identity.authdog.com/api/v1/signin/<connectionId>. - Select the FranceConnect button and choose a trusted account on the FranceConnect hosted page.
- Confirm the user appears under Users in the console with a FranceConnect identity linked.
Troubleshooting
| Symptom | Cause |
|---|---|
invalid_client |
The client credentials do not match the FranceConnect environment |
Invalid parameter: redirect_uri |
The URI registered with FranceConnect does not match Authdog's exactly |
| Discovery document 404 | The discovery URL is not the FranceConnect environment's discovery endpoint |
| Wrong level of assurance | The acr values requested do not match what FranceConnect is configured to return |
Related
| Read | To learn how to |
|---|---|
| Connectors | Set up any other social provider |
| Enterprise SSO | Connect any SAML or OIDC enterprise identity provider |