govID - introduction (EN)

For Dutch, see: govID - introductiePreview

A govID is an account you can create based on your email address, which allows you to access applications connected to govConext. The account itself is easily accessible, but because of this it cannot yet be trusted to a high degree: in order to log in to sensitive applications, a number of conditions must be met:

• the application vendor (‘Service Provider’) must allow you to use your govID for that application

• you must set up an additional authentication factor (‘Two Factor Authentication’ or TFA), see below

• for the highest level of trust, your identity must be established by a validation body. If that is required, you will be notified automatically.

If you already have an account with an organization connected to govConext, there is no need to create a govID.

1. Click on the govID starting page on the button ‘Request a govID’.

2. Then enter your (personal) email address and your first and last name.

3. You will then receive a confirmation email at the address you entered.

4. Click on the link in that email, and your govID account is immediately active.

You don't need a password for govID (but you can set one if you want, see below). Instead, you log in with a "magic link. Logging in begins by - after you created your govID - entering your email address and clicking the ‘Mail a magic link’ button. You will then receive within minutes with a ‘Login button’ in it. When you click that, you are immediately logged in and redirected to the service you were heading to.

The link expires after 10 minutes. After that, you have to request another ‘magic link’ if you still want to log in. Didn't receive an e-mail? Check your spam.

You can manage your govID through the My govID page. You can also set a password for your govID account here. Go to the ‘Security’ tab to set a password. Once you have done this, you can now choose whether to log in via a ‘magic link’ or with a password.

In addition to logging in with a “magic link” and/or a password, you can also choose to use a security key. This can be a loose, physical key (for example, a Yubikey) or a built-in sensor of your device, such as a fingerprint, as long as they are FIDO2-compatible.

To use a security key, you must first associate it with your govID through My govID. Under the ‘Security’ tab, click ‘Add Security Key’ and follow the instructions.

After you have done this you can use the security key the next time you want to log in with govID. While logging in, enter your email address and under ‘Other login methods’ click ‘Login with a security key’.

Open

The login methods that you set up yourself in govID you can choose those at login in this window.

You can manage your govID account through My govID. Here you can manage your name, your email address and the security of your govID account. You can also see here which services you have already logged into with govID and download your govID account information.

With your govID you can access web applications that are accessed via govConext. To obtain the necessary permissions to do so, turn to the party inviting you to create a govID. After your govID is created, this party can give you the necessary rights.

The govID service is based on the Open Source software ‘myConext’ which is part of the ‘OpenConext’ project initiated and lead by SURF.