About eHerkenning
Businesses and other organisations often need to deal with the government, local authorities or other official bodies. eHerkenning is the most secure way to access public services online and the only Dutch eID that allows users to act on behalf of a company. By providing online identification, eHerkenning enables its users to exchange confidential information with other organisations in a secure way.
Service providers in the Netherlands can integrate with eHerkenning to allow users to log in on behalf of their organisation.
The Signicat eID Hub allows you to connect your online services directly to eHerkenning. Using the eID Hub, you can determine per service which reliability level of eHerkenning is applicable to the service type.
Key features
The following features apply to eHerkenning:
- The only Dutch eID that allows users to act on behalf of their company.
- All Dutch government bodies must support eHerkenning when offering online services for companies.
- Supports three different Levels of Assurance (LoA).
eHerkenning specifications
eHerkenning specifications are created by the Dutch Government but with the know-how of private technology companies.
Any private party that enters eHerkenning must comply with a strict set of security requirements.
What is a service?
The public or government body that the end-user log in to is the service; for example, applying for an energy label, applying for subsidy, submitting taxes, parking permits, eLoket, pension plans, and many more.
eHerkenning eIDAS
The main purpose of eHerkenning is to allow Dutch citizens and businesses to do business online with the government. However, eHerkenning also supports electronic identification from other European login methods, in line with the European eIDAS Regulation.
What is eIDAS?
eIDAS is the acronym for "electronic IDentification, Authentication and trust Services". The eIDAS regulation facilitates secure cross-border identification in the EU by establishing a framework for digital identity and authentication.
If you are a service provider with a public task, you are obliged to accept logins coming from other European eIDs through eHerkenning. Signicat offers eHerkenning with eIDAS support on request.
You integrate with eIDAS in the same way as you do with eHerkenning but you must request eIDAS as an extra feature during onboarding. To learn more about eHerkenning and eIDAS, visit the eHerkenning website - Clients in Europe (eIDAS).
Levels of Assurance
eHerkenning offers the following Levels of Assurance (LoA):
- EH2+ (eIDAS Low): Login with username, password and additional 2FA method: SMS or PIN code.
- EH3 (eIDAS Substantial): Login with username, password and additional SMS code, PIN code (token), or an app with a QR code.
- EH4 (eIDAS High): Login with a PKIo certificate (a digital signature) or 2FA. A PKI certificate allows users to communicate securely online with Dutch banks and the tax administration.
When using eHerkenning through the eIDAS network, note that the LoA of the European eID of the end-user takes priority over the LoA defined in your online service.
Additional resources
Learn more about eHerkenning from official sources:
Next steps
When you are ready to start integrating eHerkenning with the Signicat eID Hub, follow our integration guides: