Attributes reference
When you integrate eHerkenning to verify the identity of users accessing your online services, you request and obtain personal information relevant to your use case.
To discover what kind of information is available for a given authentication protocol, visit the respective pages listed below:
- eHerkenning attributes in OpenID Connect (OIDC)
- eHerkenning attributes in SAML 2.0
- eHerkenning attributes in the Signicat Authentication REST API
In the pages above you'll also find examples of requests and responses to understand the properties of the data you receive.
For high-level information about the data points, see the Attribute glossary.
How to request attributes
To request user attributes with eHerkenning, you must specify the attributes in both:
- The service configuration. You do this in the Dashboard.
- The authorisation request. This is the request your application sends to trigger an authentication process.
To specify and request attributes from eHerkenning, do the following:
- Add the attributes in the service configuration in the service catalogue.
- Specify what attributes from step 1 you want to receive in the authentication request.
In the authentication request you can only specify attributes from the list of attributes that you previously added in the service configuration. In the response, you only receive data corresponding to the attributes that you specify in the authentication request.
Available attributes
User attributes allow you to specify the type of data that you wish to obtain from end-user authentication.
The data your application can request depend on the information required by your use case and your agreement with Signicat. Additionally, the attributes you can request depend on the configuration of your service in the service catalogue.
Here is an overview of the attributes you can request.
Identifying attributes - eHerkenning
- Pseudonym
- KvK Number (chamber of commerce)
- RSIN
- BSN (in case of sole proprietors)
- Organisation legal name
- Name
- More optional additional attributes
Identifying attributes - eIDAS (legal persons)
- Organisation legal name
- BSN (citizen service number)
- PseudoID
- VAT
- TAX number
- LEI
Identifying attributes - eIDAS (naturals persons)
- BSN
- PseudoID
- Family name
- First name
- Date of birth
- Place of birth
- Address
- Gender
After the end-user consents to share the requested attributes and completes an authentication transaction, you can retrieve the data from an endpoint - this step depends on the authentication protocol you integrate with.
Additional resources
For more information about the user attributes, consult the official eHerkenning Attribuutcatalogus.