Admitted to the market.Karin arranges it from the wallet.
Hanze Staffing places workers, and from 2027 it may only do so if the NAU has admitted it. Karin de Wit is the one who has to arrange that: a register extract from the KVK, a certificate of conduct from Justis and a tax declaration from the Belastingdienst — three authorities that used to mean scans, e-mail and waiting. This playground puts her Identidad personal in your wallet. With it she collects all three into the business wallet, and the NAU answers her application while she waits.
Cómo funciona
Tres roles, dos protocolos
Todo lo que aparece en esta página sigue los estándares de la identidad digital europea. La terminología siguiente es la misma que encontrarás en las especificaciones, para que puedas relacionar lo que ves con lo que lees.
Emisor
The party that states something about you and signs it. Here there are four: the KVK issues the register extract, Justis the certificate of conduct, the Belastingdienst the tax declaration and the NAU the admission itself.
Titular
Tú. Tus credenciales viven en el monedero de tu teléfono, no en nuestra base de datos. Tú decides cada vez si compartir, y qué.
Verificador
The party that asks for proof. The NAU is the verifier that matters: it checks that all three attestations are valid, unrevoked and about the same company before it decides. FlexGate then verifies only the NAU's conclusion.
Emisión: OpenID4VCI
Escaneas una oferta de credencial. Tu monedero obtiene la credencial del emisor y la almacena, vinculada criptográficamente a una clave que solo posee tu teléfono.
Presentación: OpenID4VP
Un verificador envía una solicitud que describe lo que necesita. Tu monedero te muestra la petición, y solo se devuelve firmado lo que tú apruebas.
Por qué el verificador sabe menos de lo que podrías esperar
Credentials in SD-JWT VC format support selective disclosure. The NAU does not ask which people Justis screened, and it does not ask for the loonheffingennummer: it asks whether the obligations were met. A paper VOG cannot leave those out; this can.
Paso 1
Usa un monedero EUDI compatible
Necesitas una aplicación de monedero para recibir y compartir credenciales. Cualquier monedero que hable OpenID4VCI y OpenID4VP puede guardarlas, pero también tiene que aceptar credenciales de un emisor que todavía no conoce, y no todos lo hacen.
Paso 2
Emite tus credenciales de prueba
Scan the QR code with your wallet to receive the Identidad personal. The data is fictional: you are receiving Karin's Identidad personal, so nothing about you is stored anywhere.
Tus credenciales
0 / 1
Identidad personal (SD-JWT VC)
Issue the Identidad personal first: it is what identifies Karin at each of the four portals.
Identidad personal (SD-JWT VC)
Karin's name, date of birth, nationality and address. It shows who she is when she signs in at the portals that issue Hanze Staffing's attestations.
Empieza aquí
Paso 3
Usa las credenciales de verdad
Issuing a credential is only half the story. The KVK, Justis, the Belastingdienst, the NAU and FlexGate are live portals; together they take Hanze Staffing from a registration to an assignment.
Karin gets Hanze Staffing admitted
Admission to the labour-hire market
flexgate.acc.credenco.comKarin de Wit signs for Hanze Staffing, a company that places workers with other employers. The last time she arranged this it took three authorities, a scanner and a fortnight of waiting. From 1 January 2027 the Wtta closes the market to anyone the NAU has not admitted, and admission means proving who the company is, that its directors were screened and that it meets its tax obligations. In this demo you are Karin: you collect the three proofs into the business wallet, apply once, and register for an assignment with the admission you get back.
What happens next
Get Karin's Identidad personal
Issue the Identidad personal above and store it in the wallet app on your phone. It is what identifies Karin when she signs in; the attestations about Hanze Staffing go into the business wallet.
Collect the register extract at the KVK
At mijnkvk.acc.credenco.com Karin collects the company registration (EUCC) into Hanze Staffing's business wallet: the name, the KVK number, the legal form and who may sign for it.
Apply for the VOG rechtspersonen at Justis
At justis.acc.credenco.com Karin shares the registration and applies for a certificate of conduct for the company. Justis screens the directors and issues the VOG into the same wallet, stating the purpose: admission to the labour-hire market.
Get the tax declaration from the Belastingdienst
At belastingdienst.acc.credenco.com Karin shares the company's identity and receives the Verklaring nakoming fiscale verplichtingen: payroll tax and VAT, assessed over the past year, with no amounts in it.
Apply for admission at the NAU
At nau.acc.credenco.com the three attestations go across in one request. The NAU checks signature, origin and validity in seconds, judges the application and issues the admission back into the same wallet.
Register for an assignment at FlexGate
FlexGate is the inlener. It asks only for the admission and the register extract: the NAU already weighed the VOG and the tax declaration, and an inlener that asked for them again would be redoing an authority's work.
You are missing Identidad personal (SD-JWT VC). You can continue, but signing in at the portals will stop when they ask for it.
If something goes wrong
- "No credentials available" means the attestation being asked for is not in the wallet you are sharing from. The three that matter live in the business wallet, not in the personal one that holds the Identidad personal.
- If an application stops halfway, start again from the portal's home page rather than reloading a page you already scanned into: every attempt gets its own code.
Más para probar
Otros casos de uso
El mismo monedero, una historia distinta. Cada uno emite lo que necesita y enlaza con su propio servicio real.