The difference between a standard eHerkenning authorisation and a chain authorisation is the login relationship.
With a standard eHerkenning authorisation, you log in on behalf of your own organisation. Each employee requires a separate eHerkenning product for every organisation they need to represent.
With a chain authorisation, employees who already have eHerkenning can log in on behalf of another organisation, for example as an intermediary.
Not sure which solution you need?
I only need to log in on behalf of my own organisation.
You need a standard eHerkenning authorisation.
→ Apply for eHerkenning
I need to log in on behalf of another organisation, for example as an intermediary.
You need a chain authorisation.
→ View all guides about chain authorisations
Important
With a chain authorisation, the organisation as a whole is authorised. The Company Administrator of the authorised organisation can then assign this authorisation to the relevant employees.
Each employee who wishes to use the chain authorisation on behalf of the authorised organisation must have their own active eHerkenning Level 3 Complete or Level 4 product.
Standard eHerkenning authorisation
A standard eHerkenning authorisation allows an employee to log in on behalf of one organisation.
Does the employee also need access to another organisation? If so, they must register a separate eHerkenning product for each organisation.
In short, if your employees need eHerkenning for multiple organisations, each employee requires a separate eHerkenning product for every organisation.
Would you like to know how to register eHerkenning for yourself or an employee? Click here.
Chain authorisation
A chain authorisation creates a link between two different organisations. It allows employees of one organisation to use their existing eHerkenning product to log in on behalf of another organisation, for example as an intermediary.
How does it work?
- The intermediary requests the chain authorisation through its own eHerkenning provider.
- The other organisation grants the chain authorisation through its own eHerkenning provider.
- Only after both organisations have completed these steps can the intermediary's employees log in on behalf of the other organisation.
An eHerkenning Company Administrator of the intermediary can then assign the chain authorisation to employees who already have an active eHerkenning Level 3 Complete or Level 4 product.
The chain authorisation must match exactly for both organisations to ensure that access remains secure and correct.
A chain authorisation can also be requested when both organisations use different eHerkenning providers.
Would you like to grant a chain authorisation to an intermediary? Click here for more information.
Would you like to request a chain authorisation from another organisation? Click here for more information.
Summary
-
Standard eHerkenning authorisation: An authorisation for one organisation. Each employee needs an eHerkenning product for every organisation they need to represent.
Example: If you have 40 employees with eHerkenning who also need access to another organisation, you will need to purchase an additional 40 eHerkenning products for that organisation.
-
Chain authorisation: Allows employees with an existing eHerkenning Level 3 Complete or Level 4 product to access another organisation through a coordinated process in which both organisations must take action.
Example: If you have 40 employees who already have the required eHerkenning product and need access to another organisation, you can assign them the chain authorisation instead. They do not need to purchase a separate eHerkenning product for the organisation they are representing.