Skip to main content

Test environment

Swisscom provides a separate public test environment. The test environment is a sandbox that mimics the production UI and API but has limitations in terms of supported features, performance, or data persistence.

Start at https://test.sign.swisscom.ch/ to sign-up first. Provide a username and password combination and an email address you control (you will receive an activation mail). Once you are in the cockpit you need to subscribe to a plan to get credentials. This is free if you provide a testing credit card found here. Once you have an active subscription, go to the API Credentials tab and generate client id and secret for TEST.

Now, you can authenticate at the APIs of our TEST environment. Use our swagger UI or the REST client or any other tool of your choice with the openAPI contract.

Note that if you want to test a full end-to-end process with signing you are restricted to AES and EES signature levels. This is because QES requires a mobile app which currently is not publicly available in the test version.

Testing GwG online identification​

If a signer requires online identification (GwG) — set via the verification object on a Signer, available for corporate tenants only — the test environment lets you force a specific identification outcome instead of completing the real identification flow. This is only possible when the identification is performed via the IDnow solution provided by Intrum; it does not apply to other identification providers. Set the signer's lastName to one of the following values:

lastName valueOutcome
X-MANUALTEST-HAPPYPATHIdentification succeeds.
X-MANUALTEST-FRAUDIDENTIdentification is rejected as fraudulent.
X-MANUALTEST-CHECKPENDINGIdentification remains pending manual review.

If the lastName does not match any of these values, the test environment automatically runs the happy path, i.e. identification succeeds without any manual action.

This mechanism only exists in the test environment. It is not available in production and cannot be used to bypass identification on real signing processes.