ScoutsMv ID
A single sign-on identity provider for The Scout Association of Maldives — one login across every Scout platform, federating to the national digital identity (eFaas) and modelled on oneGov ID.
Overview
- Central single sign-on identity provider — one account across every Scout platform and application.
- Built on self-hosted Logto (OIDC/OAuth2, token signing, sessions, MFA), run as a plain Node process — no Docker.
- Federates to the national digital identity, eFaas, with a dev-only mock-eFaas provider so the whole loop runs locally; going live is a credential swap.
- Account portal with a "Delegate Access" flow (e.g. a guardian acting for a youth member), modelled on account.one.gov.mv.
- Profile-sync webhook and eFaas single sign-out handler; the full SSO loop is verified end-to-end with Playwright.
How it works
A Scout app redirects to ScoutsMv ID to sign in; ScoutsMv ID federates to eFaas for the national identity, receives the identity claims, and issues OIDC tokens back to the app — one login, everywhere.
Identity engine
Self-hosted Logto handles all OIDC/OAuth2, token signing, sessions, and MFA, running as a plain Node process (no Docker) against a native PostgreSQL database.
eFaas federation
Federates to the national eFaas identity (gated behind NCIT partner approval). A dev-only mock-eFaas emits eFaas-shaped claims so the whole loop runs locally, with dedicated profile-sync and single-sign-out services for production.
Account portal & Delegate Access
A ScoutsMv ID account hub for managing your profile and delegating access — for example a guardian acting on behalf of a youth member — à la oneGov ID, which also serves as the reference SSO client proving the loop.