The Verify Service Provider (VSP) allows you to send and receive messages from the GOV.UK Verify Hub. GOV.UK Verify uses Security Assertion Markup Language (SAML) for secure message exchange. Using the VSP removes the need for your service to handle SAML by:
- generating SAML requests to send to the GOV.UK Verify Hub
- translating SAML responses from the GOV.UK Verify Hub into JSON
Set up the Verify Service Provider
The first step in connecting to GOV.UK Verify is to set up the VSP locally. You must host the VSP on your own infrastructure and you can connect multiple services to one instance.
Follow the step-by-step guides in this section to make sure your service correctly uses the VSP to handle:
Once you’ve confirmed your service can handle all the possible response scenarios, you can move on to testing your setup in the secure test environment which contains a full-scale deployment of the GOV.UK Verify Hub.
If you are thinking of not using the VSP, contact the GOV.UK Verify team before you start building your own service provider.