Question 1

What does NIMC NIN API do?

Accepted Answer

The NIMC NIN API refers to the suite of identity verification services provided by the National Identity Management Commission (NIMC) — the Nigerian government agency responsible for establishing, managing, and maintaining the National Identity Database (NIDB). NIMC is the authoritative source for Nigerian identity data, having enrolled over 100 million Nigerians in its National Identity Management System (NIMS) since its establishment under the NIMC Act of 2007.

NIMC provides two primary API products for identity verification: the NIMC Verification Service (NVS) — a SOAP-based enterprise web service for direct database queries — and NINAuth, a newer OAuth 2.0-based digital identity authentication service designed for seamless integration into government and private-sector applications.

**NIMC Verification Service (NVS)**
NVS is the original NIMC API, exposing Nigeria's National Identity Database as a SOAP (Simple Object Access Protocol) web service. The service provides five levels of data access:
- Level 1: Minimum — confirms NIN exists and is valid (name only)
- Level 2: Basic demographic data (name, DOB, gender)
- Level 3: Extended demographic + contact details
- Level 4: Full demographics + enrollment details
- Level 5: Maximum — full data including biometric indicators

Verification can be performed using three input methods:
1. **NIN-based lookup**: Provide the 11-digit NIN to retrieve identity data
2. **Fingerprint-based verification**: Submit biometric data for fingerprint matching against the NIMC database
3. **Demographic search**: Search by name/DOB combination to locate identity records

Access to NVS is secured via dedicated VPN connections, providing an additional layer of security beyond standard HTTPS. This enterprise-grade security posture makes NVS appropriate only for institutional integrators with the technical infrastructure to manage VPN connections.

**NINAuth — Modern Digital Identity Authentication**
In 2023–2024, NIMC launched NINAuth (ninauth.nimc.gov.ng), a new identity authentication service designed to modernize NIN-based verification. NINAuth uses OAuth 2.0 and is designed for:
- Government service portals needing federated Nigerian identity login
- Private sector applications wanting NIMC-backed user authentication
- Any platform where "Login with NIN" is appropriate

NINAuth provides a developer-friendly interface at app.ninauth.nimc.gov.ng/developers and represents NIMC's move toward a more accessible, REST-friendly verification experience.

**Tokenization and Virtual NIN (vNIN)**
To address data privacy concerns around the raw 11-digit NIN, NIMC introduced vNIN (Virtual NIN) — a tokenized alias generated per-institution that allows verification without exposing or storing the raw NIN. Under NIMC's new policy, no entity in Nigeria is permitted to verify or store the raw 11-digit NIN — they must use vNIN tokens instead. This is a critical compliance requirement for all new NIN verification integrations as of 2024.

**Who Can Access NIMC APIs**
Direct NIMC NVS access is not self-serve — it requires institutional authorization. The typical path:
- CBN-licensed banks, fintechs, insurance companies, and regulated businesses apply to NIMC
- Government agencies have institutional data-sharing agreements with NIMC
- Most Nigerian startups and SMEs access NIN verification indirectly via licensed aggregators (Prembly, Dojah, Youverify, Smile Identity) who hold NIMC data processor licenses

**Pricing**
NIMC offers tiered pricing for the NVS:
- **SME Service Plans**: Bronze, Silver, Gold — tiered by monthly verification volume
- **Enterprise Bulk Purchasing Groups**: Five enterprise tiers for high-volume institutional use

Current pricing schedules are available at the NIMC pricing portal (wiki.nimc.gov.ng/en/pricing/enterprises). NINAuth pricing is separate.

**NDPR Compliance**
All NIMC data access is governed by the Nigeria Data Protection Regulation (NDPR). Organizations accessing NIN data must implement appropriate data protection measures, complete Data Protection Impact Assessments (DPIAs) where required, and must not store raw NINs beyond what is necessary for the immediate verification purpose.

**Challenges for Nigerian Developers**
The main challenge for Nigerian startup developers is that direct NIMC access requires institutional authorization that most early-stage companies do not have. The SOAP protocol (rather than REST) adds integration complexity for modern web applications. The recommended path for startups is to use a licensed aggregator API (Prembly, Dojah, Youverify) rather than attempting direct NIMC integration — the aggregators have already obtained NIMC licenses and provide modern REST APIs with developer-friendly onboarding.

**Frequently Asked Questions**
Q: Can a startup developer access NIMC NVS directly?
A: Generally no — direct NVS access requires institutional authorization. Use a licensed aggregator like Prembly, Dojah, or Youverify instead.

Q: What is vNIN and why does it matter?
A: Virtual NIN is a tokenized alias for the raw NIN. NIMC now prohibits storing or sharing the raw 11-digit NIN — all new integrations must use vNIN for compliance.

Q: What is NINAuth?
A: NINAuth is NIMC's newer OAuth 2.0-based authentication service, providing a more developer-friendly "Login with NIN" capability for government and private-sector portals.

Q: Is there a free tier?
A: No. NIMC NVS is a paid institutional service. There is no free tier or sandbox environment for NVS.

Q: What protocol does NIMC NVS use?
A: SOAP (Simple Object Access Protocol), not REST. NINAuth uses REST/OAuth 2.0.

Question 2

How much does NIMC NIN API cost?

Accepted Answer

NIMC NIN API is a paid API. SME Plans: Bronze, Silver, Gold tiers based on verification volume. Enterprise Bulk Purchasing Groups (5 tiers) for high-volume institutions. Specific pricing at wiki.nimc.gov.ng/en/pricing/enterprises. NINAuth (new service) has separate pricing. Contact NIMC directly for current commercial terms.

Question 3

How do I authenticate with the NIMC NIN API API?

Accepted Answer

SOAP-based web service with VPN access — enterprise credentials issued after NIMC licensing approval; NINAuth uses OAuth 2.0

Question 4

Is there a rate limit on NIMC NIN API?

Accepted Answer

Not publicly documented — governed by enterprise SLA and bulk purchase tier

Question 5

Does NIMC NIN API offer a sandbox or test mode?

Accepted Answer

No public sandbox is documented for NIMC NIN API. Check the official docs for the recommended way to test integrations safely before going live.

Question 6

What is NIMC NIN API best suited for?

Accepted Answer

CBN-licensed Nigerian fintechs, banks, and government agencies that need direct access to NIMC's National Identity Database for NIN verification — the authoritative source for Nigerian identity data covering 100M+ enrolled individuals.

Question 7

Is there anything else I should know before integrating NIMC NIN API?

Accepted Answer

Direct NIMC NVS access requires NIMC approval and licensing — not a self-serve API. Most Nigerian startups access NIN verification indirectly via licensed aggregators (Prembly, Dojah, Youverify). NIMC is introducing tokenization (vNIN) to prevent raw 11-digit NIN storage. NINAuth (ninauth.nimc.gov.ng) is the newer OAuth-based authentication service. NVS uses SOAP protocol.

Question 8

Where can I find NIMC NIN API's documentation?

Accepted Answer

The official API documentation is at https://nimc.gov.ng/nimc-verification-service-api. The provider's website is https://nimc.gov.ng.

Question 9

Does NIMC NIN API support Nigerian developers?

Accepted Answer

Yes — NIMC NIN API explicitly supports Nigerian developers/use cases.

NIMC NIN API

Features Included

Not Supported

Key Highlights

Required Access Documents

Use Cases

Ask question or give feedback

Sign in to participate

Discover similar API's

Ask question or give feedback

Sign in to participate