Last modified: May 28, 2024

Altinn Information model

Altinn Studio, Altinn Apps and Altinn Platform has a modern cloud native architecture. This documentation describes everything from the requirements affecting the architecture to the defined capabilities and the components that provides them.

Altinn Information model

Full screen

Altinn Authorization

Access PackageAn access package is a named and categorized “container” to which resource owners can add rights through policies. See an overview of packages and categories.
Altinn RoleA Altinn role is a relationship between organizations and organizations, organizations and persons, and persons and persons. The relationships exist because ER roles implicitly give them through or users have explicitly delegated them. Altinn will discontinue Altinn Roles from the solution in 2026
PolicyA policy contains rules for accessing an app or a resource. The app developer or resource owner defines it. Altinn uses XACML as a policy format. Read more about the policy format.
RuleA rule defines different operations on resources / apps.
DelegationA delegation is when a user gives rights to a person, system, or organization. A delegation gives rights through delegated roles, delegated access Packages, or delegated single rights through a delegation policy.
Delegation PolicyA policy created by end-users when they delegate rights to other users/organizations.
ResourceA resource is metadata about a digital or analog service that a resource owner wants to use Altinn Authorization for access control. When defining a service as a resource in Altinn Resource Registry with a policy, resource owners can use Altinn PDP to control access to external solutions.
Access ListAn access list defines entities that can access a resource if the resource requires access list access.

Altinn Register

PartyCan be a organization, person or self identifed entiy. Identifed by PartyUid or PartyId. Defined by Altinn
OrganizationOrganization from entity register. Organizations offers roles to persons and other organizations.
PersonPerson from folkeregister.
SelfIdentifedUserCreated in Altinn by user that does not have a identity number in Norway.

Altinn Studio

AppAn application is created in Altinn Studio.
App RepositoryThe app repository is the source control repository where the source code and configuration for an Altinn app is stored. A new repo is created for each app created in Altinn Studio. The repos located in Gitea under the org that owns the app. Example repos for Finanstilynets apps
OrgShort for organisation. Organisation is the entity responsible for an app. Typically identified by an unique acronym, e.g. SKD, NAV, OSLK. See full list of Altinn orgs here

Altinn Events

EventsAn event is a lightweight notification message containing information about a single operation or state change for a specified entity. Each event is published by a single originator, referred to as the event publisher or source, on behalf of a single person, organization or asset, known as the subject. The operation or state change is referred to as the event type. Read more about Events
SubscriptionA subscription let a event subscriber tell Altinn Events what type of events he is interested in. If authorized for the event, it will be pushed to an Web hook defined by the subscriber. [Read more](/events/subscribe-to-events/

Altinn Storage

InstanceAn instance works as a form of envelope or folder where data can be collected and exchanged between the user and owner of the application. The instance document is a way for Altinn and external parties to track the state of one specific data exchange.
Data elementThe data element model is the main model for metadata related to a specific data element. A data element can be any data associated with an instance. The two most common type of data is the actual form data and attachments.
Instance EventsInstance events contains information about changes on instances. Read more

Altinn Notifications

NotificationA notification is the single instance of an email or SMS that is sent to a single recipient. orgs can generate notifications