The difference between a standard eHerkenning authorisation and a chain authorisation is the login relationship.
With a standard eHerkenning authorisation, you log in on behalf of your own organisation. Each employee requires a separate eHerkenning product for every organisation they need to represent.
With a chain authorisation, employees who already have eHerkenning can log in on behalf of another organisation, for example as an intermediary.
Not sure which solution you need?
I only need to log in on behalf of my own organisation.
You need a standard eHerkenning authorisation.
→ Apply for eHerkenning
I need to log in on behalf of another organisation, for example as an intermediary.
You need a chain authorisation.
→ View all guides about chain authorisations
Important
A chain authorisation does not replace an eHerkenning subscription. Every employee must have an active eHerkenning Level 3 Complete or eHerkenning Level 4 before a chain authorisation can be used.
Standard eHerkenning authorisation
A standard eHerkenning authorisation allows an employee to log in on behalf of one organisation.
Does the employee also need access to another organisation? If so, they must register a separate eHerkenning for each organisation.
In short, if your employees need eHerkenning for multiple organisations, each employee requires a separate eHerkenning product for every organisation.
Would you like to know how to register eHerkenning for yourself or an employee? Click here.
Chain authorisation
A chain authorisation creates a link between two different organisations. It allows employees of one organisation to use their existing eHerkenning subscription to log in on behalf of another organisation, for example as an intermediary.
How does it work?
- The intermediary requests the chain authorisation through its own eHerkenning provider.
- The other organisation grants the chain authorisation through its own eHerkenning provider.
- Only after both organisations have completed these steps can the intermediary's employees log in on behalf of the other organisation.
An eHerkenning Company Administrator of the intermediary can then assign the chain authorisation to employees who already have eHerkenning.
The chain authorisation must match exactly for both organisations to ensure that access remains secure and correct.
A chain authorisation can also be requested when both organisations use different eHerkenning providers.
Would you like to grant a chain authorisation to an intermediary? Click here for more information.
Would you like to request a chain authorisation from another organisation? Click here for more information.
Summary
-
Standard eHerkenning authorisation: An authorisation for one organisation. You pay for every employee and every organisation.
Example: If you have 40 employees with eHerkenning who also need access to another organisation, you will need to purchase an additional 40 eHerkenning products.
-
Chain authorisation: Allows employees with eHerkenning to access another organisation through a coordinated process in which both organisations must take action.
Example: If you have 40 employees who already have eHerkenning and need access to another organisation, you can assign them a chain authorisation instead. This saves costs because no additional eHerkenning products are required.