FranceConnect+ integration: a guide for private businesses
Who may use FranceConnect+ as a private relying party, what users see, the pivot identity you receive, eIDAS levels and French AML rules, DataPass and La Poste contracts, limits, and a document fallback.
In short
FranceConnect+ (FranceConnect plus) is the high-assurance version of France's state login, FranceConnect: it lets a user prove their identity to your service with France Identité (High) or L'Identité Numérique La Poste (Substantial), and returns a signed "pivot identity" of name, sex, date and place of birth.[4][5][6] A private company may build a FranceConnect+ integration only if a law or regulation obliges it to verify its users' identity, such as a bank under the French Monetary and Financial Code.[7]
- Plain FranceConnect is low assurance and does not meet French AML rules.[5][10]
- Access goes through DataPass plus a paid La Poste contract; prices are not published.[7][8]
FranceConnect is the French state's login federation: one button that lets a person sign in to a service with an account they already hold, such as their tax account or their France Identité app.[3] FranceConnect+ is its stronger branch, built for services that must know who the user really is.[4]
Below: who may connect, the flow, the data, assurance levels and anti-money laundering (AML) rules. Other countries: eID schemes by country.
FranceConnect and FranceConnect+ at a glance
Both are run by the state's digital directorate (DINUM), entirely on French territory.[1]
FranceConnect+
The high-assurance branch of France's state login federation
FranceConnect vs FranceConnect+
| Point | FranceConnect | FranceConnect+ |
|---|---|---|
| Level delivered | Low ("faible"), whatever the identity provider[5] | Substantial or High[5] |
| Identity providers | impots.gouv.fr, Ameli.fr, La Poste, MSA, YRIS (ends 1 July 2026), France Identité, TrustMe[3] | La Poste and France Identité only; TrustMe listed as "à venir", the e-carte Vitale mentioned as possible[3][4] |
| Where the data comes from | The national register of persons (RNIPP)[6] | Directly from the identity provider[6] |
| Price for a private provider | Free[7] | Usage-based, under a contract with La Poste[8] |
| French AML identity check | No: the level is too low[10] | Yes, for obliged entities[10] |
Adoption: how many people use FranceConnect
DINUM, the operator, reported its ten-year figures on 20 May 2026.[1]
The undated partner documentation gives 43 million active users, and 435 million logins over 12 months across FranceConnect and FranceConnect+.[2] FranceConnect+ identities grew by more than 100,000 a month in early 2025.[3] France Identité had more than 5 million users by 1 October 2026.[12][13] The share of French adults holding a FranceConnect+ identity is not published, so treat 7 million, not 45 million, as the reachable base.
What the user sees in a FranceConnect plus sign-in
The flow is a redirect: the user leaves for FranceConnect+, signs in with their identity provider, consents, and comes back.[3] France Identité documents a personal code plus a tap of the chip ID card on the phone (NFC); its exact sign-in screens are not published.[14]
Verify your identity
Continue with FranceConnect+
Use an ID document instead
1The user clicks the FranceConnect+ button.
Choose your account
L'Identité Numérique La Poste
France Identité
2FranceConnect+ lists the identity providers.
Enter your code
3The user types the personal code.
Hold your ID card
Place the card against the back of the phone.
Read the card
4The phone reads the card's chip by NFC.
Share your data
- Family nameShared
- Date of birthShared
- Place of birthShared
- AddressNot shared
Continue
5The user consents, then returns to your service.
Illustration of the documented steps, not the official screens. With La Poste, steps 3 and 4 are an approval in its app.
Same-device and cross-device variants are not documented separately. Your service cannot choose which identity providers appear, and on FranceConnect the provider used is hidden from you, following a 2015 opinion of the data protection authority (CNIL).[3]
Video pending: flow-redirect
A redirect sign-in with a national eID, start to finish.
The user consents to share data
Simplified, in the order the documentation gives.[3][4]
What a business receives
The partner documentation defines the data as the "identité pivot", the pivot identity, plus a pseudonymous identifier that is different for each service.[6]
| Attribute | In the pivot identity | Format or note |
|---|---|---|
| Family name (nom de famille) | Yes | Text[6] |
| Given names (prénoms) | Yes | Text[6] |
| Sex | Yes | Pivot identity field[6] |
| Date of birth | Yes | Pivot identity field[6] |
| Place of birth | Yes | INSEE code of the birthplace[6] |
| Country of birth | Yes | INSEE code of the birth country[6] |
| Subject identifier (sub) | Returned with it | Pseudonymous, one per service[6] |
| Usage name (nom d'usage) | Optional | When the person has one[6] |
| Optional | Verified email[6] | |
| Address, portrait, national number | No | Collect separately if your rules need them |
FranceConnect+ level of assurance and legal standing
Plain FranceConnect delivers only the low level, whatever the identity provider: identities are "rabaissées à un niveau de garantie faible".[5] FranceConnect+ itself is qualified by ANSSI, the French cybersecurity agency, at High as a platform; the delivered level is Substantial for La Poste and High for France Identité.[5] On the European Commission's list, "FranceConnect+ / The Digital Identity La Poste" is notified at Substantial, and France Identité is notified at High.[9] FranceConnect itself is not on the list.[9]
French law
FranceConnect is governed by the arrêté du 8 novembre 2018 relatif au téléservice dénommé « FranceConnect ».[7] eID certification rests on Article L. 102 of the Post and Electronic Communications Code (CPCE), from the loi pour une République numérique, and décret n° 2022-1004 du 15 juillet 2022, which sets the ANSSI certification framework and the "présomption de fiabilité" (R. 54-16 to R. 54-27 CPCE).[11] France Identité rests on décret n° 2022-676 du 26 avril 2022.[15]
AML customer due diligence in France
The Monetary and Financial Code (CMF) lets obliged entities verify identity with eID. Article R. 561-5-1 1°, in its version since 5 April 2021 as modified by décret n° 2021-387, accepts:
Article R. 561-5-1 1°Code monétaire et financier
"a) A un moyen d'identification électronique certifié ou attesté par l'[ANSSI] conforme au niveau de garantie soit substantiel soit élevé [...] ou b) [...] délivré dans le cadre d'un schéma notifié [...] substantiel soit élevé"
Source: Légifrance, CMF, Articles R. 561-5 and following[10]
Point 2° adds an eID "présumé fiable au sens de l'article L. 102" of the CPCE.[10] Both FranceConnect+ providers are notified at Substantial or High, so on our reading they fit point 1°; plain FranceConnect, at the low level, does not.[5][9][10]
Otherwise, Article R. 561-5-2 lists other measures, and obliged entities "choisissent celles qui, combinées entre elles, permettent la vérification de tous les éléments d'identification".[10] They include an ANSSI-certified remote identity proofing service (PVID) at substantial (5°) and an advanced or qualified e-signature or seal on a qualified certificate (6°).[10] According to the ACPR's revised guidelines, two of those measures are required.
The AMLR angle from 2027
From 10 July 2027, the EU Anti-Money Laundering Regulation (AMLR) sets one rule. Article 22(6)(b) allows "the use of electronic identification means which meet the requirements of Regulation (EU) No 910/2014 with regard to the assurance levels 'substantial' or 'high'".[16] The Anti-Money Laundering Authority's (AMLA) final draft standards of 30 September 2026, sent to the Commission and not yet law, treat these means as the default and remote document checks as a justified alternative.[17] Our reading, not a regulator's: FranceConnect+ fits point (b); plain FranceConnect does not. The EU Digital Identity Wallet (EUDI Wallet) is the other route in the same article, and every Member State must offer one by 24 December 2026.[18]
Who may use FranceConnect+ as a private relying party
Settle this first. Any public body may connect. A private company may connect only if a law or regulation obliges it to verify the identity of its own users; the documentation gives a bank under CMF Articles L. 561-2 and L. 561-5, and change-of-address services, as examples.[7]
Low assurance
FranceConnect
- Request access through DataPass
- Free for every service provider
- Not enough for French AML checks
Arrêté du 8 novembre 2018
Default for regulated firms
FranceConnect+
- DataPass request plus a contract with La Poste
- Usage-based price, not published
- Substantial or High, AML-grade
CMF R. 561-5-1 1°
Fallback
Document and remote proofing
- No state habilitation needed
- Combine measures, such as certified PVID
- Works for people without an eID
CMF R. 561-5-2
How the connection works
- Request access on DataPass (datapass.api.gouv.fr), where eligibility is checked: the request has to show the law or regulation that obliges you to verify your users' identity.[7]
- FranceConnect+ is free for public bodies for now, with a change of model pending; private providers sign a usage-based contract with La Poste.[8] Prices are not published as of 5 October 2026.
- The eIDAS node, for citizens of other EU countries, is mandatory for public services and optional for private ones.[7][8]
- Build an OpenID Connect integration with encrypted tokens.[4]
The sources describe no certified broker programme and no onboarding lead time.
Use cases and sector rules
| Use case | What the rules say |
|---|---|
| Bank and fintech know-your-customer (KYC) | FranceConnect+ fits CMF R. 561-5-1 1° for obliged entities, on our reading[10] |
| Electronic signing | An advanced or qualified signature or seal on a qualified certificate is a separate CMF R. 561-5-2 6° measure[10] |
| Adult content age checks | Arcom requires at least one "double anonymat" method[19] |
| Gambling, telecom and other sectors | No sector rule for FranceConnect+ in the sources; eligible only with a legal duty to verify users; the EU wallet duty names telecommunications from 24 December 2027[7][18] |
For a bank or fintech, FranceConnect+ covers the identity check at onboarding; screening and the risk assessment stay with you. An advanced or qualified signature or seal on a qualified certificate is a separate R. 561-5-2 measure, used when R. 561-5-1 means are not.[10]
Arcom's référentiel, under loi n° 2024-449 (SREN), asks adult sites for at least one "double anonymat" method and does not name France Identité.[19] According to Siècle Digital, France Identité was testing a proof that shows only "over 15" or "over 18" in February 2026; whether it is live and accepted under Arcom's référentiel is not published as of 5 October 2026.
Limits and fallbacks
- A user needs France Identité or L'Identité Numérique La Poste.[3]
- France Identité needs the card-format French national identity card, and High assurance needs an in-person certification at a town hall or consulate.[14] Since May 2026, there is a route for French citizens abroad, at a consulate, and in overseas territories.[14]
- FranceConnect's help pages describe how users block a stolen identity and how service providers report fraud.[20][21] No dated breach is documented.
1Offer FranceConnect+ first
Show the button to users in France.
The user holds France Identité or a La Poste identity
Receive the pivot identity
Substantial or High, signed by the provider.
Verify with a document
NFC chip reading, liveness and face match.
2Screen and decide
AML screening, then the decision.
eID first, document route as fallback, one decision at the end.
FranceConnect+ integration checklist
- Confirm the law or regulation that obliges you to verify your users' identity.[7]
- File the DataPass request with your legal basis.[7]
- Negotiate the usage-based contract with La Poste.[8]
- Decide whether to turn on the eIDAS node for other EU citizens.[7][8]
- Implement the OpenID Connect (OIDC) flow with encrypted tokens.[4]
- Map the pivot identity to your customer record and store the sub per user.[6]
- Build the document fallback in the same flow.
How Didit helps with eID verification in France
FranceConnect is on Didit's roadmap. For French users today, Didit verifies people with the document route: NFC chip reading, liveness and face match, plus AML screening against more than 1,300 sanctions, politically exposed person (PEP) and watchlists, in one workflow. A full KYC check costs $0.33 and AML screening $0.20.
The same workflow runs national eIDs in other countries with a document fallback; see the digital ID wallets docs and eID verification in France.
Didit provides
- Document checks with NFC chip reading, liveness and face match
- AML screening against sanctions, PEP and watchlists
- The evidence of every check
Stays with you
- The legal basis and your own DataPass eligibility
- The risk assessment and the onboarding decision
Bring FranceConnect to your sign-up
Tell us where your French users sign in, and start with documents today.
Key takeaways
- FranceConnect is low assurance; only FranceConnect+ gives Substantial or High.
- On our reading, FranceConnect+ fits French AML rules under CMF R. 561-5-1 1° and AMLR Article 22(6)(b) from 10 July 2027.
- You receive the pivot identity and a per-service identifier, not an address or a portrait.
- With only two identity providers, plan a document fallback.
Frequently asked questions
What is the difference between FranceConnect and FranceConnect+?
FranceConnect delivers the low level of assurance whatever account the user picks. FranceConnect+ delivers Substantial with La Poste or High with France Identité.[5] Only FranceConnect+ is strong enough for French AML identity checks.[10]
Can a private company use FranceConnect+?
Yes, but only if a law or regulation obliges it to verify its own users' identity, such as a bank.[7] Eligibility is checked in the DataPass request.
How much does FranceConnect+ cost for a business?
Private providers sign a usage-based contract with La Poste; public bodies use it free for now.[8] Plain FranceConnect is free.[7] Prices are not published as of 5 October 2026.
What data does FranceConnect+ return?
Family name, given names, sex, date of birth, INSEE codes of the place and country of birth, and a per-service pseudonymous identifier.[6] Usage name and verified email are optional. No address or portrait.
Is FranceConnect+ enough for AML customer due diligence in France?
For identity verification, yes: CMF Article R. 561-5-1 1° accepts eID at Substantial or High.[10] You still need screening and a risk assessment. From 10 July 2027, AMLR Article 22(6)(b) accepts the same levels.[16]
Which level of assurance does FranceConnect+ give?
Substantial with L'Identité Numérique La Poste and High with France Identité.[5] Both are on the Commission's list of notified schemes.[9]
Can foreigners and non-residents use FranceConnect+?
EU citizens can sign in with their own notified eID through the eIDAS node, optional for private services.[7][8] France Identité needs a French ID card; since May 2026, French citizens abroad can certify at a consulate, and a route exists in overseas territories.[14] Others need the document route.
Can minors use FranceConnect+?
A minimum age is not published in the primary sources as of 5 October 2026. Keep the document route for younger users.
How long does a FranceConnect+ integration take, and can I test it?
Lead times and test environment terms are not published in the sources reviewed on 5 October 2026. The technical part is a standard OIDC flow with encrypted tokens.[4]
Sources
- FranceConnect a 10 ans, DINUM press release, 20 May 2026.
- Présentation générale, FranceConnect partner documentation, undated.
- Les fournisseurs d'identité, FranceConnect partner documentation.
- Différences entre FranceConnect et FranceConnect+, FranceConnect partner documentation.
- Niveau eIDAS, FranceConnect partner documentation.
- Données d'identité, FranceConnect partner documentation.
- Éligibilité, FranceConnect partner documentation.
- Facturation, FranceConnect partner documentation.
- Overview of pre-notified and notified eID schemes under eIDAS, European Commission, read 5 October 2026.
- Code monétaire et financier, Articles R. 561-5 and following, Légifrance.
- Les moyens d'identification électronique et leur certification, ANSSI.
- France Identité franchit le cap des 5 millions d'utilisateurs, France Identité.
- France Identité franchit le cap des 5 millions d'utilisateurs, French Ministry of the Interior.
- Identité numérique certifiée, France Identité.
- Décrets et avis CNIL, France Identité.
- Regulation (EU) 2024/1624 (AMLR), Article 22, EUR-Lex.
- Final Report, draft RTS under Article 28(1) AMLR, AMLA, 30 September 2026.
- Regulation (EU) 2024/1183 (eIDAS 2), EUR-Lex.
- Référentiel technique sur la vérification de l'âge, Arcom, October 2024.
- Je me suis fait usurper mon identité, que faire, FranceConnect help.
- Fraude : gérer les signalements, FranceConnect partner documentation.
For a similar scheme, read Germany's Online-Ausweis; to compare every eID Didit runs or plans, see eID verification with Didit.
Verify French users with documents today
Run NFC chip reading, liveness and face match now, and add FranceConnect when it reaches Didit.
Related articles
- Cl@ve integration in Spain: who can connect and what to use instead
- PhilSys verification: how businesses check the National ID
- OpenID4VP verifier guide: accepting the EUDI Wallet
- eIDAS regulation explained: what eIDAS 2 (2024/1183) changes
- Smart-ID API: a developer's guide to RP API v3
- National digital identity worldwide: models, leaders, standards