SWITCH edu-ID Link Composer

For most SPs in SWITCHaai the Service Provider Login Link Composer is what you are looking for.

This page lets a Service Provider administrator compose links for various flows of the SWITCH edu-ID service.


for which the link should be generated


that the user should be returned to after the flow:


that the user should be returned to after the flow:
Please note that this URL (for security reasons) must be on the same host as the Service Provider or an edu-ID web site. Otherwise, the target URL will be ignored or an error will be shown.


of the SP that the SAML assertion should be sent to:
There is no need setting this parameter unless the Service Provider has multiple Assertion Consumer URLs.


that should be used for edu-ID pages.


  Registration with Login Flow
User starts at the edu-ID registration page to register. After registration, the user has to authenticate with his newly created edu-ID and is then redirected to the target URL.
More details are described on the Registration and Login Flows page.

  Direct Login Flow (with registration if needed)
User starts on the edu-ID login page where he can authenticate or create an edu-ID account in case he has no edu-ID account yet. After (registration and) login, the user is then sent to the target URL.
More details are described on the Registration and Login Flows page.

  Attribute Completion Flow
User is sent to the 'My edu-ID' (user account management) page and asked to add one or several missing attributes. Attributes that already exist in the user account are not shown in the form to add.
Attributes to add:

Some notes regarding the above attributes:

  • The mobile number and additional e-mail address attributes can only be added verified, which means that there is an intermediary step where users must enter the verification code that is sent to their mobile number or e-mail address.
  • For all other unverified attributes, a user just has to provide a value, which is used without any verification.
After providing this attribute in the 'My edu-ID' page, the user first must authenticate/login again and is then sent back to the target URL.
More details are described on the Attribute Completion Flow page.

  Attribute Edit Flow
User is sent to the 'My edu-ID' (user account management) page and asked to add or edit a single attribute, regardless if the user already previously added/verified the particular attribute.
Attributes to edit:

  • In case a verified attribute has to be provided by the user, a verification process (e.g. sending a verification code to a mobile number or postal address) is initiated after providing a value.
  • In case of an unverified attribute, a user just has to provide a value, which is used without any verification.
After providing this attribute in the 'My edu-ID' page, the user first must authenticate/login again and is then sent back to the target URL. If multiple attributes have to be added, it's better to use the attribute completion flow above.
More details are described on the Attribute Completion Flow page.

  AAI Account Linking Flow
User is sent to the 'My edu-ID' page and asked to link an AAI identity of an organisation to his edu-ID account.
If the user should create a linked identity with a particular organisation, provide the organisation domain name (i.e. ethz.ch, hes-so.ch):

  • If the user is to create a link to particular AAI organisation, he is directly sent to the login page of this organisation when clicking on the link.
  • If no organisation domain name is provided, the user can choose an AAI organisation to create a linked identity for.
After providing this attribute in the 'My edu-ID' page, the user first must authenticate/login again and is then sent back to the target URL.
More details are described on the Attribute Completion Flow page.