FranceConnect: FranceConnect

Definition

How FranceConnect Works

FranceConnect operates as a federated identity broker based on the OpenID Connect protocol. Rather than requiring each government service to manage its own authentication system, FranceConnect acts as a central hub that connects identity providers (such as tax authorities, social security, and La Poste) with service providers across the public and private sectors.

When a citizen wants to access an online service, they choose one of several identity providers through the FranceConnect interface. The identity provider authenticates the user and passes verified identity attributes back to the requesting service through FranceConnect. This model means citizens only need to remember credentials from one identity provider while gaining access to over 1,400 connected services.

The system supports multiple levels of assurance. The basic FranceConnect provides LoA Low to Substantial, while FranceConnect+ offers enhanced verification at LoA Substantial to High, suitable for sensitive transactions such as banking, healthcare, and legal proceedings.

FranceConnect and the EUDI Wallet Transition

France's approach to the EUDI Wallet is built on incremental evolution rather than revolution. The France Identité app, which serves as France's EUDI Wallet pilot, integrates directly with FranceConnect infrastructure. This means the millions of services already connected to FranceConnect can accept EUDI Wallet credentials with minimal technical changes.

The France Identité wallet adds several capabilities beyond traditional FranceConnect: it stores verifiable credentials locally on the user's device, supports selective disclosure of attributes, enables offline verification through NFC, and meets the high level of assurance requirements specified in eIDAS 2.0. Citizens can use their national identity card (CNI) with NFC to activate the wallet and verify their identity.

This integration strategy gives France a significant advantage in EUDI Wallet adoption. With over 40 million FranceConnect users already familiar with digital identity verification, the transition to wallet-based credentials should encounter less friction than in countries starting from scratch.

Architecture and Technical Standards

FranceConnect is built on the OpenID Connect (OIDC) protocol, which provides a standardized authentication layer on top of OAuth 2.0. Identity providers connect to FranceConnect through certified OIDC endpoints, and service providers integrate using standard OIDC client libraries. This architecture made it straightforward to extend the system with OpenID4VP and OpenID4VCI protocols for verifiable credential exchange.

The system implements strict security requirements including mandatory HTTPS with HSTS, certificate pinning for mobile applications, and cryptographic key management through HSMs. All data exchanges are encrypted and signed, and the platform undergoes regular security audits by ANSSI (France's national cybersecurity agency).

FranceConnect also implements privacy-by-design principles. It does not store user activity logs beyond what is required for security monitoring, and service providers only receive the minimum set of identity attributes needed for their specific use case. This approach aligns well with the selective disclosure requirements of the EUDI Wallet framework.

Real-World Usage Scenarios

In practice, FranceConnect is used daily by millions of French citizens for a wide range of services. Common use cases include filing tax returns through impots.gouv.fr, accessing health insurance information through Ameli, applying for social benefits through the CAF portal, and registering vehicles through the ANTS platform. The France Identité wallet extends these digital interactions to in-person scenarios.

For example, a French citizen can now use the France Identité app to prove their age when purchasing age-restricted goods, verify their identity when checking into a hotel, or present their driving license during a traffic stop. The wallet can selectively disclose only the necessary information: proving you are over 18 without revealing your exact date of birth, or confirming your address without sharing your full identity details.

The system also supports cross-border scenarios through the eIDAS node network. A French citizen traveling to Germany can use their France Identité wallet to access German government services or verify their identity at a car rental agency, with the credential being verified against the EU trust framework.

Related Terms