To request a chain authorisation as an intermediary to log in on behalf of a customer (hereinafter referred to as 'the main company'), you must complete the following steps.
First, you must have completed eHerkenning level 3 Complete (eHerkenning level 3 Tax Authorities is not sufficient). You must also have been assigned the company administrator status. When you have become a company administrator on behalf of your organisation, you can request a chain authorisation. After this has been requested and approved by you, you must grant this chain authorisation to an employee or to yourself. The process is described per step.
Requesting a chain authorisation costs €24.20 incl. VAT.
A chain authorisation can only be established if both the intermediary and the main company have an eHerkenning subscription.
Does the main company not have eHerkenning? Then request a standard authorisation via the steps in this page: Add authorisation on behalf of a customer without eHerkenning.
Follow the steps below to request a chain authorisation from your client.
1. Become a Company Administrator
To request a chain authorisation, you need to access the Self Service Portal. You do this by requesting the status of company administrator, which can be done by following the steps below:
- Log into your Digidentity account via my.digidentity.eu.
-
Go to the 'Companies' tab
-
Click on the relevant organisation
-
Click on “Org and Me”.
-
Click on 'Become administrator'
2. Request a chain authorisation
Within the Self-Service Portal, follow the steps below to request a chain authorization, and assign the correct services:
- Log into the Self Service Portal
-
Go to the 'Companies' tab
-
Click on the company for which you are acting.
-
Click on ‘Chains’.
-
Click on 'Received chain authorisations'.
-
Click on 'Request new authorisation'.
-
Enter the KvK number of the main company.
-
Click on 'Proceed'.
-
Select ‘eHerkenning LoA 3’ for 'Level of Assurance'.
-
Select the eHerkenning supplier with which the main company has an eHerkenning resource under 'Identity Provider'.
-
Click on 'Submit authorisation request'.
-
Scroll down to 'Services'.
-
Click on ‘All services’ to see an overview of all services.
-
Click on ‘Authorise’ next to the desired service(s).
-
Click on 'eHerkenning' at the top right of the bold text 'Service Name'.
-
Finally, click on ‘Approve’.
The authorisation has now been created. However, you are not finished yet. The authorisation must be assigned to an employee. This can also be yourself.
3. Authorise an employee
The approved authorisation must be passed on to an employee (or yourself) within the organisation. To do this, follow the steps below:
- Log into the Self Service Portal
-
Go to the 'Companies' tab
-
Click on the company for which you are acting.
-
Click on the ‘Users’ tab.
-
Click on the desired user. If you need the chain authorisation yourself, click on your own name.
-
Click on 'Create a new chain authorisation'.
-
Select ‘eHerkenning + [Main Company Name]’ under ‘Catalogue’.
-
NOTE: Do not click on the option 'Restrict authorisation to certain locations'. This will cause issues on many portals.
-
-
Select 'eHerkenning LoA 3' for 'Level of Assurance'.
-
Click on 'Create an authorisation'.
-
Click only on ‘Authorise’.
-
Click on 'Approve'.
Your part of the chain authorisation is now complete. Please note that the chain authorisation is only functional once your client (the company you want to log in for) has completed their side of the chain authorisation. You will only be able to log in once the selected services from the catalog match. Read more on the next page: Logging in with a chain authorisation.
In the event that the authorisation does not work, you must first contact the company on whose behalf you want to log in and coordinate which services are enabled. They must check this with their eHerkenning supplier. Suppliers do not communicate with each other.