If your organization meets the two criteria below, you must give European citizens and companies access.
Your organization is a public organization or a private organization with public duties. Examples of these are municipalities, provinces, waterboards, ministries, implementing organizations, university hospitals, healthcare insurers, universities and pension funds.
Dutch citizens and companies may log in to your website using login means at the substantial and/or high level. Examples of these are DigiD and eHerkenning. With DigiD ‘substantial’, Dutch citizens may also log in to services at the ‘low’ level of assurance. With EH3 and EH4, Dutch companies may also log in to services at the ‘low’ level of assurance.
Please note: this pertains to the level of assurance of the login means rather than the service.
You may give European citizens and companies access with eHerkenning coupling point version 1.11. You need a connection to an eHerkenning broker for this. Your broker may advise you how you can enable access for European citizens (with and without a Citizen Service Number) and European companies.
The government has chosen to incorporate the eIDAS infrastructure in the Trust Framework for Electronic Identification. Only authorized eHerkenning brokers are able to make your services accessible to European citizens and companies.
Connecting to eHerkenning
In addition to a connection to the eIDAS infrastructure, the authorized brokers may also ensure that your organization will be connected to eHerkenning. eHerkenning is the standard solution for online access in the business domain. eHerkenning allows Dutch companies to gain access to your digital services. In order to accept eHerkenning, you use the same coupling point as for eIDAS.
The level of assurance of your service does not affect the eIDAS requirement. Based on the eIDAS Regulation, the Ministry of the Interior has indicated that if you offer services that require the DigiD and/or eHerkenning login means, you must also make these services accessible through the European login means recognised under eIDAS.
The idea is that a login means with Substantial or Higher assurance, always allows you to log in to a service requiring a less reliable service level. If Dutch citizens and companies are able to log in to the higher levels of assurance with their login means, other European citizens and companies must be able to do the same with their own means.
The price of your connection to eHerkenning highly depends on your preferences. Five authorized brokers offer a connection to eHerkenning. You may request a quotation from one or several of them, by stating your requirements. These include the preferred Service Level Agreement, whether you only want to become eIDAS-proof, or have greater ambitions within the eHerkenning framework, and the preferred degree of subject-matter support and customisation. This overview lists all brokers.
Your organization may want to inform the press that you will soon be able to provide your digital services to European citizens, consumers and company representatives. You may consult about press releases and other communications by sending an email to eIDAS@logius.nl.