csam simplified egovernment iam_eng_dd20140618

Identity Management conference June, 18th 2014 London (UK) 1

Simplifying eGovernment in a Complex Country

THE BELGIAN CSAM INITIATIVE

Belgium and the Regions:FlandersBrusselsWallonia

Simplifying eGovernment in a Complex Country

The Belgian CSAM Initiative

Identity Management conference June, 18th 2014 London (UK) 2

The 5 minute version (slightly outdated)

http://vimeo.com/15239617

Limiting factors• Strict privacy regulation• Budget cuts• Perceived complexity• Conflicting initiatives

Boosting factors• eID card• Setup of Authentic Sources• Knowledge/service sharing

between eGov partners• Regional eGov directives

and Federal eGov focus (Tax-on-Web/Dimona/…)

eGovernment in Belgium

The Belgian CSAM Initiative

Identity Management conference June, 18th 2014 London (UK) 3

Identity Management conference June, 18th 2014 London (UK) 4

Applying Identity & Access Management in an eGovernment context

The Belgian CSAM Initiative

Getting Access

Granting Access

Authentic Sources

Identification & Authentication

AttributesApplication

Roles

eGov Application

User

Authentic Sources

Legal Representative

Chief Access Administrators

Access Administrators

End Users

Role ManagementOther

Access Control Enforcement

CBE

Evolution of IAM in eGovernment context

The Belgian CSAM Initiative

5

Co-existence

Integrated

Common

Identity Management conference June, 18th 2014 London (UK)

CSAM = A cooperation framework, a set of agreements to organise everything to do with Identity & Access Management in an e-government context.

Therefore we need:Agreements and guidelines for:

IdentificationAuthenticationAuthorisationAccess Administration

IT Services:FAS: service for authentication and identification of persons,BTB: service to administer access administrators

What is CSAM?

The Belgian CSAM Initiative

Identity Management conference June, 18th 2014 London (UK) 6

As a citizen, representing myself

As a citizen, representing an enterprise

FAS: service for authentication and identification of persons

The Belgian CSAM Initiative

7

Innovation:One-Time-Password generated by device, based on eID

Easy to use Well know by broad

audience Via “Recognition Criteria”

Identity Management conference June, 18th 2014 London (UK)

End Users Appointed by Access Admin For Role (which is active in Domain), within Enterprise

BTB: service to administer access administrators

The Belgian CSAM Initiative

8

Legal Representative of Enterprise Defined in Authentic SourceCrossroads Bank for Enterprises

Chief Access Admin Designated by Legal Repr For Enterprise

Access Admin Appointed by Chief Access Admin For a group of applications (in the same ‘domain’)

PIP

PIP

PIP

PIP

Digital signature with eID

Online procedure

Online procedure

BTB

CBE

Identity Management conference June, 18th 2014 London (UK)

9

Working together clearly results in success!

The Belgian CSAM Initiative

Avg# login/week Jan. 2013 : 200kAvg# login/week Jan. 2014 : 500kAvg# login/week June 2014 : 700k

Registered enterprisesToday: 115186

Identity Management conference June, 18th 2014 London (UK)

Identity Management conference June, 18th 2014 London (UK) 10

THANK YOU!

The Belgian CSAM Initiative

Identity Management conference June, 18th 2014 London (UK)

The Belgian CSAM Initiative

Contact & more information

Jan Vanhaecht

Architect for CSAM

Mail: Jan.Vanhaecht@csam.beTwitter: @janvanhaechtGSM: +32473625636http://www.linkedin.com/in/javaha

Wouter Debecker

Service owner CSAM

Mail: Wouter.Debecker@csam.bePhone: +3227874561http://www.linkedin.com/in/wouterd

11