FranceConnect is the French government's central identity aggregator. Instead of authenticating users itself, it forwards sign-in to trusted public-service accounts (impots.gouv.fr, ameli, La Poste, etc.) and returns a verified identity to your application. Authdog fronts it as a first-class enterprise OIDC connector, which lets parents and citizens sign in through FranceConnect with one connection.

## Copy the redirect URI

In the [Authdog console](https://console.authdog.com/dashboard/authentication?tab=providers&category=federation), select the project and environment, find **FranceConnect** (the **Federation** filter is pre-selected by this link), and click **Enable**. Copy the redirect URI shown in the form:

```url
https://identity.authdog.com/api/v1/callback/<connectionId>
```

## Register with FranceConnect

FranceConnect access is provisioned by the DGNum operator for eligible public-service and education partners.

1. Request a client from the FranceConnect operator for the integration environment, then production.
2. Provide the redirect URI from Authdog as a registered redirect URI.
3. The operator returns a **Client ID**, **Client Secret**, and the OIDC **discovery URL** for the environment.

FranceConnect distinguishes an **integration** environment from **production**. Keep one Authdog connection per environment and use email domains or connection names to tell them apart.

## Configure Authdog

| Field | Value |
| --- | --- |
| **Connection name** | A label that identifies this FranceConnect connection, e.g. `franceconnect-prod` |
| **OIDC discovery URL** | The discovery document URL supplied by the FranceConnect operator |
| **Client ID** | The client identifier issued by FranceConnect |
| **Client secret** | The client secret issued by FranceConnect |
| **Scopes** | `openid profile email` plus any FranceConnect-required scopes |
| **Email domains** | The discovery domains that should route to this connection |

Save, then toggle the connection **active**.

## What FranceConnect returns

Authdog requests the `openid profile email` scopes and reads the normalized profile from the ID token and the userinfo endpoint. FranceConnect returns a verified identity and the level of assurance (`acr`) used for the sign-in, which you can read from the token claims.

## Test it

1. Open your environment's hosted sign-in page, or link to `https://identity.authdog.com/api/v1/signin/<connectionId>`.
2. Select the FranceConnect button and choose a trusted account on the FranceConnect hosted page.
3. Confirm the user appears under **Users** in the console with a FranceConnect identity linked.

## Troubleshooting

| Symptom | Cause |
| --- | --- |
| `invalid_client` | The client credentials do not match the FranceConnect environment |
| `Invalid parameter: redirect_uri` | The URI registered with FranceConnect does not match Authdog's exactly |
| Discovery document 404 | The discovery URL is not the FranceConnect environment's discovery endpoint |
| Wrong level of assurance | The `acr` values requested do not match what FranceConnect is configured to return |

## Related

| Read | To learn how to |
| --- | --- |
| [Connectors](/docs/connectors) | Set up any other social provider |
| [Enterprise SSO](/docs/sso) | Connect any SAML or OIDC enterprise identity provider |