MyDigitalID Connector

The MyDigitalID connector integrates Kiwire with Malaysia's national digital identity platform, enabling users to verify their identity using their national ID (MyKad / IC number) via the MyDigitalID app. This is particularly useful for compliance requirements, age verification, or government-mandated identity logging in Malaysian deployments.

'alt' => 'Dashboard overview', 'caption' => 'The default Kiwire dashboard layout', 'screenshot' => true, 'class' => '', ]) Drop images into: public/assets/img/docs/{page}/{filename} --}}

Image not uploaded yet public/assets/img/docs/connector-mydigitalid/overview.png

What is MyDigitalID?

MyDigitalID is a digital identity platform developed by the Malaysian government. It allows Malaysian citizens to verify their identity digitally using their national identity card (MyKad) through a smartphone app. The platform provides a secure, government-backed identity verification layer without requiring users to upload physical documents.

For WiFi operators, integrating MyDigitalID means every authenticated user has a verified Malaysian national identity on record — satisfying requirements for real-name registration where required by Malaysian communications regulations.

Use Cases

• Regulatory compliance — Log verified user identities as required by MCMC (Malaysian Communications and Multimedia Commission) for public WiFi operators.
• Age verification — Verify that users are above a minimum age before granting access to certain content or services.
• Government venues — Public WiFi in government buildings, libraries, or community centres where identity logging is mandatory.
• Banking & fintech — Combine WiFi access with eKYC (electronic Know Your Customer) verification for regulated environments.

How It Works

1. User connects to WiFi and is shown the captive portal. They select Login with MyDigitalID.
2. The portal displays a QR code generated by Kiwire using the MyDigitalID OAuth 2.0 authorisation request.
3. The user scans the QR code with their MyDigitalID mobile app on their smartphone.
4. The app prompts the user to authorise the requested data scopes (e.g. name, IC number, age group).
5. MyDigitalID sends the authorisation callback to Kiwire with an authorisation code.
6. Kiwire exchanges the code for tokens and retrieves the user's verified identity data from the MyDigitalID API.
7. Kiwire creates or updates the user's WiFi account using the verified data and grants network access.

'alt' => 'Dashboard overview', 'caption' => 'The default Kiwire dashboard layout', 'screenshot' => true, 'class' => '', ]) Drop images into: public/assets/img/docs/{page}/{filename} --}}

Image not uploaded yet public/assets/img/docs/connector-mydigitalid/qr-flow.png

Developer Portal Registration

Before configuring the connector in Kiwire, register your application on the MyDigitalID Developer Portal. Obtain your client credentials and configure the redirect URI for your Kiwire deployment. The exact steps are provided by MDEC (Malaysia Digital Economy Corporation) through the developer onboarding process.

Configuration Fields

Field	Description
client_id	Client ID assigned to your application by the MyDigitalID developer portal
client_secret	Client secret for authenticating Kiwire's token exchange requests with MyDigitalID
redirect_uri	OAuth callback URL — shown in Kiwire; must be registered in the MyDigitalID developer portal
scope	Data scopes requested from the user: basic identity (openid profile), IC number (ic_number), verified age group (age_group), address (address)

Data Received from MyDigitalID

After successful authorisation, Kiwire receives the following verified identity data:

Data Field	Description
Full name	User's full legal name as on the national registry
IC number (masked)	National identity card number — stored hashed; only the last 4 digits are shown in the UI
Verified age group	Age bracket (e.g. 18–25, 26–35) — exact birth date is not disclosed
Gender	As recorded on the MyKad (if scope requested)

Privacy & Data Handling

Kiwire handles MyDigitalID data in accordance with the Malaysia Personal Data Protection Act (PDPA 2010):

• IC numbers are hashed using SHA-256 before storage — the plain-text IC number is never persisted in the database.
• Hashed IC numbers are shown as ****1234 (last 4 digits only) in the admin UI for reference and deduplication purposes.
• Data received from MyDigitalID is used solely for authentication and identity logging — it is not shared with third parties.
• Users must actively consent to data sharing within the MyDigitalID app before any data is transmitted to Kiwire.

Required Permissions

view-connector-mydigitalid · edit-connector-mydigitalid