- 01Enterprise application
Persist the business reference and request state; prepare the approved redirect.
- 02Mobile-ID
Orchestrate the request and maintain separate correlation for authentication, attribute sharing and signing.
- 03RAR/C06 / VNeID
Authenticate through the applicable service; the user grants or denies consent.
- 04ShareInfo / callback
Receive authorized attributes and validate the state against the initiated request.
- 05User / RS-HUB
Request separate signing authorization on the applicable route; login is not consent to sign.
- 06CA / RSSP
Create the signature within provider scope and return it for validation and reconciliation.
RAR/C06 Integration
Distinguish SSO, ShareInfo and signing routes in services provided through RAR/C06, with explicit responsibilities.
Identity services and signing routes remain separate layers
Mobile-ID publicly documents cooperation with RAR Center for SSO/ShareInfo; The site does not infer ownership of VNeID or RS-HUB.
Separate public evidence from project architecture
Mobile-ID publicly states that it signed a contract with the RAR Center on 10/02/2026 for VNeID SSO/ShareInfo services. Mobile-ID Sign does not expand that statement into a claim that every RS-HUB or signing flow is already production.
If the table is wider than its frame, scroll horizontally to see all columns; use arrow keys when the table region has focus.
| Capability | Evidence | Status |
|---|---|---|
| VNeID SSO | Mobile-ID publicly states a contract with RAR Center for VNeID SSO/ShareInfo dated 10/02/2026 | Publicly documented |
| ShareInfo | Same public statement covers ShareInfo | Publicly documented |
| RS-HUB signing route | Included as project/reference architecture in Sign; no reviewed public source here proves the exact production contract | Reference |
Business transaction and exception paths
SSO, ShareInfo and signing are separate transactions. The exception model covers cancellation, denial, timeout, unavailable attributes, provider failure and reconciliation.
- 01Business application
Request and correlation reference
- 02Mobile-ID
Orchestrate → redirect → track
- 03RAR/C06 / VNeID / RS-HUB
Contract-scoped services; user authentication and consent where applicable
- 04CA / RSSP
Separate signing authorization → signature → verification
Sequence linking identity, attributes and signing
Exception lane and recovery responsibility
If the table is wider than its frame, scroll horizontally to see all columns; use arrow keys when the table region has focus.
| Outcome | Application / operator action |
|---|---|
| Cancel or deny | Return the user outcome; do not initiate signing. |
| Timeout or expired challenge | Reconcile first; create a new request only with renewed user confirmation. |
| Callback state mismatch | Reject and investigate correlation, session and redirect binding. |
| Attribute unavailable or denied | Apply business policy; never substitute inferred identity data. |
| Signing provider unavailable | Preserve the uncertain state; reconcile or escalate without silently switching routes. |
Responsibility boundaries and evidence
If the table is wider than its frame, scroll horizontally to see all columns; use arrow keys when the table region has focus.
| Component | Responsibility | Evidence to review |
|---|---|---|
| Enterprise | Business record, representative authority and acceptance | Record reference, version and approval |
| Mobile-ID | Contract-scoped orchestration, correlation and handoff | Request, callback, state and audit |
| RAR/C06 / VNeID | Applicable identity / attribute service | Authentication result and consent scope |
| CA / RSSP | Signing credential and signature creation | Certificate, signed output and verification |