Overview

DON Security offers guidance on using major Dutch government authentication and security standards. It helps teams implement DigiD, eHerkenning, OAuth, OIDC, PKIoverheid, and related standards, with topic-based documentation to navigate quickly. This supports building compliant, secure government software.

How This Skill Works

The content is organized by standard and topic, with links to official reference pages. Browse the DigiD, eHerkenning, OAuth, OIDC, and PKIoverheid pages or ask for guidance on a specific topic to obtain concrete implementation steps.

When to Use It

• Implementing DigiD authentication in a Dutch government app
• Integrating eHerkenning for partner access
• Adding OAuth 2.0 authentication flow
• Implementing OpenID Connect (OIDC) for user SSO
• Applying PKIoverheid or related government PKI standards

Quick Start

1. Step 1: Determine which Dutch government standard applies (DigiD, eHerkenning, OAuth, OIDC, PKIoverheid)
2. Step 2: Open the corresponding standard page under references/standaarden to review requirements
3. Step 3: Implement with approved libraries, configure endpoints, and validate tokens/certificates (use OpenKAT if available)

Best Practices

• Start with the official standard pages for DigiD, eHerkenning, OAuth, OIDC, and PKIoverheid
• Use the OpenKAT tool for testing and validation when available
• Validate tokens, signatures, and certificates using recommended libraries and practices
• Align implementation with related standards (eIDAS, NIS1/NIS2) where applicable
• Document the chosen standard in security documentation and security-txt

Example Use Cases

• Citizen-facing portal authenticating users via DigiD
• Partner API access secured with eHerkenning
• Service integrating OAuth 2.0 for API authorization
• Single sign-on using OpenID Connect (OIDC) for government services
• Internal tool using PKIoverheid certificates for strong identity verification

Frequently Asked Questions