Application for using the technical interface

An organisation that uses the technical interface of the Incomes Register needs a certificate available from the Incomes Register’s certificate service. Such a certificate is used to authenticate an organisation reporting income data or using data reported to the Incomes Register. Additionally, the integrity of a record is ensured with a certificate. Certificates are issued in accordance with the purpose of use.

Discuss with your payroll system provider and request instructions for the following questions:

  • what kind of connection has been established from the payroll system to the Incomes Register
  • should you obtain a certificate
  • how should you retrieve a certificate for your payroll system

Applications for using the technical interface can be made via the Incomes Register’s e-service. Log in to the e-service by clicking the 'Incomes Register sign in' link on the top of the incomesregister.fi page. If you use a Katso ID, read about signing in to and using the e-service with a Katso ID. Click the link on the page to sign in to the service with a Katso ID.

Who should apply for using the technical interface?

The certificate is required by a company or an accounting firm that uses payroll  software for which the technical interface has been established between the Incomes Register and the system. Applications for using the technical interface can only be made by an authorised signatory of the organisation applying for a certificate, i.e.

  • Managing Director
  • substitute for the Managing Director
  • official with the right to sole representation 
  • Katso master user
  • entrepreneur

Applications for using the technical interface can only be made by the organisation's authorised signatory who has the right to sole representation or the actual Katso master user. An authorised signatory can make an application for the certificate only if the authorised signatory has been granted the necessary right to sole representation in the organisation's signature clause.

If the application is made by an accounting firm or other outsourcing partners of the payroll administration, it must have a valid contract and the authorisation to act on behalf of its customer. The accounting firm can use the same certificate to act on behalf of all of its clients. Different software within an accounting firm or company can use the same certificate for different programs, if the same type of certificate is compatible with the requirements of the different programs. Alternatively, an accounting firm or company can obtain a separate certificate for each software.

Who can actually obtain a certificate?

Even if a company or an accounting firm applies for using the technical interface, on its application it can indicate that a representative of a software firm, for example, will act as the technical contact person for the certificate. This contact person can handle the practical steps involved in applying for a certificate. The information required for generating a certificate will be sent to the technical contact person by secure email. They will also receive a text message containing the PIN code for opening the message. The PIN code will be sent after the 'Open message' link in the secure email has been clicked.

How is an application for using the technical interface submitted?

An authorised signatory of the organisation submits an application for using the technical interface via the Incomes Register's e-service.

You can log in to the Incomes Register's e-service using online banking codes, a mobile certificate or a certificate card. The master users of organisations that use the Katso identification must log in to the service using Katso IDs.

Please indicate the following on the application

  • the purpose of use of the interface and certificate
  • the services and channels the applicant intends to use
  • the details of the certificate's technical contact person (name, email address, and telephone number).

Also indicate whether your organisation will report data to the Incomes Register on its own behalf or on behalf of another party.

On the application, the authorised signatory should accept the terms and conditions and information security requirements.

A certificate should be ordered while submitting the application. The organisation's designated technical contact person for the certificate will receive instructions on retrieving the certificate.

The technical contact person for the certificate will receive a secure email message at the email address provided. The email message contains the transfer IDs associated with the certificate request (TransferID and TransferPassword). The contact person will receive a PIN code by SMS that will enable them to read the secure e-mail.

The certificate is valid for two years

The certificate is valid for two years, after which it must be renewed. The technical contact person specified for the certificate will receive an email message about the expiration of the certificate 60 days in advance.

Apply for a new certificate

The 'Apply for a new certificate' function is used when applying for a new certificate (e.g. additional certificates) for a valid channel or when the retrieval of a certificate has failed (telephone number or email address has been entered incorrectly, PIN code has been lost).

When applying for a new certificate, you can only choose the channels for which you have previously made an application and the access rights of which are valid.

Replacement application

A replacement application is made when changes or corrections are made to the original application, for example, due an error in the original application.

Make a replacement application in the following situations

  • changing the original application (e.g. deployment of a new channel). Enter all the channels you wish to use, including those that are already valid, in the application
  • correcting an error in the original application (requested a wrong channel).

Example of accounting firms applying for certificates

Accounting firm A, which has the following customers:
Customer 1 Oy
Customer 2 Oy
Customer 3 Oy

Accounting Firm B, which has the following customers:
Customer 2 Oy
Customer 4 Oy, wants to make record subscriptions itself

An authorised signatory of the accounting firm submits an application for using the technical interface via the Incomes Register's e-service and retrieves a single certificate.

In conjunction with obtaining a certificate, a representative of the software house, for example, can be designated as the technical contact person who will, in practice, retrieve the certificate on behalf of the accounting firm. In practice, the certificate can be generated for the accounting firm by the party whom the authorised signatory of the accounting firm has named as the technical contact person.

Customer 2 Oy’s payrolls are managed by Accounting Firm A and Accounting Firm B. Both accounting firms have their own certificates and handle transactions on behalf of their customers normally, as agreed with Customer 2 Oy.

Customer 4 Oy wants to make record subscriptions itself, but with Accounting Firm B reporting wages. Customer 4 Oy can use the e-service for record subscriptions, or obtain its own certificate. Accounting Firm B has its own certificate, which is used in reporting.

If Customer 4 Oy uses the e-service to make a record subscription, the required persons must be authorised to use the e-service, via either the Suomi.fi e-Authorisations service or the Katso service.

Read more about the certificate