General information and requirements
Below you can find all information if you are an intermediary and want to log in on behalf of a customer using a chain authorization. To request a chain authorization as an intermediary, follow the steps below.
- You must be a company administrator of your organization by purchasing the Company Administrator Level 4 product, or by purchasing at least eHerkenning Level 3 Complete and then requesting company administrator status.
- Once you are a company administrator, you can request a chain authorization. After approval, you must assign this authorization to an employee or yourself.
- The cost for requesting a chain authorization is €24.20 incl. VAT.
A chain authorization only works once both you and your customer have completed your respective parts of the process.
This means:
- You must request a chain authorization via your portal.
- Your customer must also grant a chain authorization via their eHerkenning provider.
Have you completed all steps, but your customer has not? Then you cannot log in using your chain authorization. Does your customer not want eHerkenning? Then you may be able to request a standard authorization. More information can be found here: Add an authorization on behalf of a customer without eHerkenning.
Step 1. Become a company administrator
Before you can request a chain authorization, you must first become a company administrator.
Do you not yet have eHerkenning? Then you can register the Company Administrator Level 4 product. Click here for more information.
Do you already have at least eHerkenning Level 3 Complete and want to become a company administrator? Click here: How do I become an eHerkenning company administrator?
Step 2. Request a chain authorization
In the Self Service Portal, follow the steps below to request the chain authorization and assign the correct services:
- Log in on your PC via selfservice.digidentity.eu
- Click on your own company
- Click on ‘Chain Authorizations’
- Click on ‘Request new authorization’
- Enter the Chamber of Commerce (KvK) number of your customer’s company and select the identity provider used by your customer.
- Check the details and click ‘Confirm and continue’
- Select the services you want to be authorized for:
- Want to select all services? Click ‘All services’
- Want to make a selection? Check the desired services
- Click ‘Save’ and then ‘Confirm’
- Click ‘Approve’
The authorization has now been created. However, you are not done yet! You must still complete step 3 to assign the chain authorization to employees. This also applies if you want to log in yourself using the chain authorization. The chain authorization is not automatically assigned to your employees.
Step 3. Assign the chain authorization to employees
The authorization must be assigned to an employee (or yourself) within the organization. Follow the steps below:
- Log in on your PC via selfservice.digidentity.eu
- Click on your own company
- Click on the ‘Chain Authorizations’ tab
- Click ‘Show all’ under the category ‘Received authorizations’
- Click ‘Manage users’ under the chain authorization you want to manage
- Click ‘Add users’
- Enter the names or email addresses of the user you want to add. Please note: you can only invite users who have completed at least an eHerkenning Level 3 Complete registration.
- Click ‘Confirm and approve’
- The authorization has now been assigned. The users automatically have access to all services you selected in your chain authorization.
Do you want to change the services for your employees?
- Click ‘Chain Authorizations’
- Click ‘Show all’ under the category ‘Received authorizations’
- Click ‘Manage users’ under the chain authorization you want to manage
- Click on the user whose authorization you want to change
- Select the correct services and click ‘Save’
Your part of the chain authorization is now complete. Please note that the chain authorization only becomes functional once your customer has completed their part of the process with their own eHerkenning provider. You can only log in once the selected services match. More information: Logging in with a chain authorization.
I have completed all steps, but I cannot log in
- Do you not see the chain authorization when trying to log in? Then you may not have completed step 3 to grant the authorization to the employee(s). Even if you are an administrator and want to log in yourself using the chain authorization, you must complete step 3 to authorize yourself.
- If both you and your customer have completed the chain authorization, the selected services may not match. Contact your customer to align this. Also check whether you entered the KvK numbers correctly.
- Do both you and your customer use eHerkenning with Digidentity? Then contact the Service Desk; we can check whether the correct services have been activated for you.
What happens to employee authorizations when I change a chain authorization?
When you change a chain authorization that has already been assigned to employees, there are two possibilities.
You add a service to the chain authorization
When you add services to the chain authorization, these are not automatically assigned to users you have already authorized. If you want to add these services to those employees, you must do this manually.
You remove a service from the chain authorization
When you remove services from the chain authorization, they are automatically removed for all users you have already authorized.