Skip to main content

Initial preparations

On this page you find information about the preparatory steps to follow before you can start testing and using eHerkenning.

Note that the application process requires communication between your organisation and the Signicat onboarding team.

Pre-production and production

It is important to note that you must first integrate with eHerkenning in a pre-production (sandbox) environment before you can go live in a production environment.

Prerequisites​

If you are new to Signicat, sign up for a free Signicat account by completing the following initial preparations:

  1. Sign up to the Signicat Dashboard and register your profile. For more details, see the Get started with Signicat guide.
  2. In the Dashboard, make sure you have set up an organisation.

Sign agreements with Signicat​

To obtain access to Signicat services, you first need to sign contractual agreements with us.

The agreements to sign are:

  1. An agreement contract
  2. A data processing agreement (DPA)

Contact us to get started with these agreements:

Sign the Self-declaration​

In order for Signicat to register you in the eHerkenning federation, you need to:

  1. Sign the Self-declaration (Zelfverklaring) where you indicate that you agree to the demands and agreements in the eHerkenning federation (in Dutch). You can find the template document at Template zelfverklaring Dienstverlener.
  2. Send the signed self-declaration to us by creating a support ticket in the Signicat Dashboard.

Perform this step for each service that you want to create in the eHerkenning and/or eIDAS service catalogue.

Set up accounts and domains​

To integrate with eHerkenning in the pre-production environment, you need to set up a sandbox account with a domain in the Signicat Dashboard. To go live in production, you will also need a production account associated with a domain.

Existing accounts

If you want to use eHerkenning in an account that you have previously created, you may skip this step.

In the Signicat Dashboard, do the following:

  1. Create a sandbox account. This is where you set up the pre-production implementation.
  2. Create a production account. You will use this when you go live in production.

For instructions on how to create an account in the Dashboard, see the Create an account section.

Add a domain​

To handle network communication between your application and the eID and Wallet Hub (which links you to eHerkenning), you need a domain associated to your account(s).

When integrating with eHerkenning, you can choose to configure:

  • A custom domain. A domain with a certificate for your website (for example, login.acme.com).
  • A standard Signicat domain. A domain with a Signicat subdomain address (for example, example.app.signicat.com).

For instructions on how to create a domain, see the domains documentation.

Domain in combination with DigiD

If you also wish to integrate also with DigiD and use Let's Encrypt certificates, then you must use a .nl domain. Learn more in the Logius documentation.

Next steps​

Once you have completed the steps on this page, you can proceed to create a Certificate Signing Request (CSR) and purchase the PKIoverheid certificates for eHerkenning.

2. Manage certificates
Create a CSR and purchase PKIoverheid certificaes
On this page