FKA (Login for kommunal bruger)

The FKA identity provider (https://digitaliseringskataloget.dk/løsninger/adgangsstyring-brugere) allows users to log in using their municipal credentials.

Visualization of Groups and Access

With the FKA provider, the customer portal provides a visualization of:

Groups: View all groups defined within the FKA system.
Product Access: See which products and services are assigned to each group.
User Membership: View the list of users belonging to each group.

Note: Group management and user assignments are handled within the FKA/KOMBİT system itself, not directly in the Karnov customer portal.

Note: Please contact Karnov customer service if you need to make any adjustments to the product access mapping for each group.

When using FKA login for the first time, or when migrating from another identity provider, users may encounter different login journeys.

Scenario 1: Single Existing Account Found (Automatic Prompt)

This flow occurs when the system can uniquely match the email from your municipal login to one existing Karnov account.

Initiation: Click "Login for kommunal bruger" on the Karnov login page. You will be redirected to the KOMBİT authentication page.
Identity Confirmation: The system will ask: "Is this your account?", showing your existing Karnov account details.

Note: If you click "Jeg genkender ikke denne konto" (I don't recognize this account), you will be taken through the manual linking flow described in Scenario 2.
Verification: Verify your identity using one of the available authentication methods for your account, or choose to skip linking and continue as a new user (see Scenario 3):
- Email & Password: If enabled, enter your existing Karnov password to confirm your identity.
- Microsoft (Entra ID): If enabled, you can authenticate using your Microsoft account instead.
Note: The available verification methods are determined by the authentication methods configured for the matched Karnov account. You may see email/password, Microsoft, or both — depending on how that specific account is set up.

Optional (organization setting): If email verification is enabled for your organization, users who verify with email and password must complete an email verification challenge after entering credentials.
Access: Once verified, you will be logged into your Karnov dashboard.

Note: If you authenticated with Microsoft and the Microsoft account email does not match the account shown in the previous step, you will be redirected to the Account linking screen to confirm the linking of accounts.

Scenario 2: No Automatic Match (Manual Linking Flow)

This flow occurs when your municipal login email is not recognized by the system, or when you indicate that you don't recognize the account that was found (see Identity Confirmation in Scenario 1). It allows you to link your FKA identity to an existing Karnov account of your choice.

Initiation: Authenticate via the KOMBİT portal.
Selection: The system will present the screen: "Add your other Karnov accounts." You can choose to "+ Link another account" to proceed with linking, or "Skip" to continue without linking and create a new Karnov user (see Scenario 3).
Manual Entry: If you choose to link, sign in to the Karnov account you wish to connect using one of the available authentication methods:
- Email & Password: If enabled, enter the email and password of the Karnov account you wish to connect.
- Microsoft (Entra ID): If enabled, you can authenticate using your Microsoft account instead.
Note: The available authentication methods are determined by your organisation's configuration.

Optional (organization setting): If email verification is enabled for your organization, users who verify with email and password must complete an email verification challenge after entering credentials.
Review: The "Account linking" screen will show both your new FKA identity and your existing Karnov account.
Completion: Click "Link accounts" to merge them. You can now sign in using either method.

Note: At the Manual Entry and Review steps, you can also choose to skip linking. You will be asked to confirm this decision — see Scenario 3.

Scenario 3: Skipping Account Linking

This flow applies when a user chooses to skip account linking — available at Verification in Scenario 1, or at Selection, Manual Entry, and Review in Scenario 2.

Skip Confirmation: When you choose to skip, the system displays a warning: "Spring kontolinkning over" (Skip account linking), informing you that this is a permanent decision — you will not be able to recover or synchronize data from your other Karnov accounts in the future.
Choice:
- Click "Gå tilbage og link konti" (Go back and link accounts) to return and complete the linking process.
- Click "Fortsæt uden at linke" (Continue without linking) to proceed. A new Karnov user will be created and linked to your FKA identity.
Access: You will be logged into your newly created Karnov account.

Scenario 4: Multiple Existing Accounts Found

This flow occurs when the email from FKA matches more than one existing Karnov account.

Initiation: Click "Login for kommunal bruger" on the Karnov login page.
Identity Confirmation: The system shows "Is this your account?" with multiple matching account candidates. You can review the last login timestamps to better understand which account was used most recently.
Verification Method: Select an account and complete one of the available verification methods for that specific account. Each account can have one or more verification methods, based on its individual setup. In this example, one account supports email and password, and another supports Microsoft (Entra ID):
- Email and password, if configured. Optional (organization setting): If email verification is enabled for your organization, users who verify with email and password must complete an email verification challenge after entering credentials (see Scenario 1 - Verification and Scenario 2 - Manual Entry).
- Microsoft (Entra ID), if configured.
Result: After successful verification, the selected Karnov account is linked and used for login.