Algusest peale eIDAS 2.0 nõuetele vastav

Admitted to the market.Karin arranges it from the wallet.

Hanze Staffing places workers, and from 2027 it may only do so if the NAU has admitted it. Karin de Wit is the one who has to arrange that: a register extract from the KVK, a certificate of conduct from Justis and a tax declaration from the Belastingdienst — three authorities that used to mean scans, e-mail and waiting. This playground puts her Isikutunnistus in your wallet. With it she collects all three into the business wallet, and the NAU answers her application while she waits.

Kuidas see töötab

Kolm rolli, kaks protokolli

Kõik sellel lehel järgib Euroopa digiidentiteedi standardeid. Allolev terminoloogia on sama, mida leiad spetsifikatsioonidest, nii et saad nähtu loetuga hõlpsasti kokku viia.

Väljaandja

The party that states something about you and signs it. Here there are four: the KVK issues the register extract, Justis the certificate of conduct, the Belastingdienst the tax declaration and the NAU the admission itself.

Omanik

Sina. Sinu tõendid asuvad rahakotis sinu telefonis, mitte meie andmebaasis. Sina otsustad iga kord, kas ja mida jagada.

Kontrollija

The party that asks for proof. The NAU is the verifier that matters: it checks that all three attestations are valid, unrevoked and about the same company before it decides. FlexGate then verifies only the NAU's conclusion.

Väljastamine: OpenID4VCI

Skaneerid tõendipakkumise. Sinu rahakott laadib tõendi väljaandjalt alla ja salvestab selle, krüptograafiliselt seotuna võtmega, mis on ainult sinu telefonis.

Esitamine: OpenID4VP

Kontrollija saadab päringu, mis kirjeldab, mida tal vaja on. Sinu rahakott näitab sulle päringut ja tagasi saadetakse allkirjastatuna ainult see, mille sina heaks kiidad.

Miks saab kontrollija teada vähem, kui võiks arvata

Credentials in SD-JWT VC format support selective disclosure. The NAU does not ask which people Justis screened, and it does not ask for the loonheffingennummer: it asks whether the obligations were met. A paper VOG cannot leave those out; this can.

Järgmine samm

1. samm

Kasuta ühilduvat EUDI rahakotti

Tõendite vastuvõtmiseks ja jagamiseks vajad rahakotirakendust. Neid suudab hoida iga rahakott, mis toetab OpenID4VCI-d ja OpenID4VP-d, kuid see peab vastu võtma ka tõendeid väljaandjalt, keda ta veel ei tunne, ja seda ei tee iga rahakott.

2. samm

Väljasta oma testtõendid

Scan the QR code with your wallet to receive the Isikutunnistus. The data is fictional: you are receiving Karin's Isikutunnistus, so nothing about you is stored anywhere.

Sinu tõendid

0 / 1

Isikutunnistus (SD-JWT VC)

Issue the Isikutunnistus first: it is what identifies Karin at each of the four portals.

Isikutunnistus (SD-JWT VC)

Karin's name, date of birth, nationality and address. It shows who she is when she signs in at the portals that issue Hanze Staffing's attestations.

Alusta siit

Järgmine samm

3. samm

Kasuta tõendeid päriselt

Issuing a credential is only half the story. The KVK, Justis, the Belastingdienst, the NAU and FlexGate are live portals; together they take Hanze Staffing from a registration to an assignment.

Karin gets Hanze Staffing admitted

Admission to the labour-hire market

flexgate.acc.credenco.com

Karin de Wit signs for Hanze Staffing, a company that places workers with other employers. The last time she arranged this it took three authorities, a scanner and a fortnight of waiting. From 1 January 2027 the Wtta closes the market to anyone the NAU has not admitted, and admission means proving who the company is, that its directors were screened and that it meets its tax obligations. In this demo you are Karin: you collect the three proofs into the business wallet, apply once, and register for an assignment with the admission you get back.

What happens next

1

Get Karin's Isikutunnistus

Issue the Isikutunnistus above and store it in the wallet app on your phone. It is what identifies Karin when she signs in; the attestations about Hanze Staffing go into the business wallet.

2

Collect the register extract at the KVK

At mijnkvk.acc.credenco.com Karin collects the company registration (EUCC) into Hanze Staffing's business wallet: the name, the KVK number, the legal form and who may sign for it.

3

Apply for the VOG rechtspersonen at Justis

At justis.acc.credenco.com Karin shares the registration and applies for a certificate of conduct for the company. Justis screens the directors and issues the VOG into the same wallet, stating the purpose: admission to the labour-hire market.

4

Get the tax declaration from the Belastingdienst

At belastingdienst.acc.credenco.com Karin shares the company's identity and receives the Verklaring nakoming fiscale verplichtingen: payroll tax and VAT, assessed over the past year, with no amounts in it.

5

Apply for admission at the NAU

At nau.acc.credenco.com the three attestations go across in one request. The NAU checks signature, origin and validity in seconds, judges the application and issues the admission back into the same wallet.

6

Register for an assignment at FlexGate

FlexGate is the inlener. It asks only for the admission and the register extract: the NAU already weighed the VOG and the tax declaration, and an inlener that asked for them again would be redoing an authority's work.

Issue the Isikutunnistus first

You are missing Isikutunnistus (SD-JWT VC). You can continue, but signing in at the portals will stop when they ask for it.

If something goes wrong

  • "No credentials available" means the attestation being asked for is not in the wallet you are sharing from. The three that matter live in the business wallet, not in the personal one that holds the Isikutunnistus.
  • If an application stops halfway, start again from the portal's home page rather than reloading a page you already scanned into: every attempt gets its own code.