Slides by @janvanhaecht and Wouter Debecker about the Belgian e-government programme on federated Identity & Access Management presented at the Identity Management conference by @whitehallmedia. London 18/06/2014. CSAM was co-developed by @Smals_ICT on behalf of Belgian social security institutions & federal government services.
Jewish Efforts to Influence American Immigration Policy in the Years Before t...
CSAM simplified egovernment IAM_eng_dd20140618
1. Simplifying eGovernment in a Complex Country
THE BELGIAN CSAM
INITIATIVE
Identity Management conference June, 18th 2014 London (UK) 1
2. Belgium and the Regions:
Flanders
Brussels
Wallonia
Simplifying eGovernment in a Complex Country
The Belgian CSAM Initiative
Identity Management conference June, 18th 2014 London (UK) 2
The 5 minute version (slightly outdated)
http://vimeo.com/15239617
3. Limiting factors
• Strict privacy regulation
• Budget cuts
• Perceived complexity
• Conflicting initiatives
Boosting factors
• eID card
• Setup of Authentic Sources
• Knowledge/service sharing
between eGov partners
• Regional eGov directives
and Federal eGov focus
(Tax-on-Web/Dimona/…)
eGovernment in Belgium
The Belgian CSAM Initiative
Identity Management conference June, 18th 2014 London (UK) 3
4. Applying Identity & Access Management in an
eGovernment context
The Belgian CSAM Initiative
Identity Management conference June, 18th 2014 London (UK) 4
Getting Access
Granting Access
Authentic
Sources
Identification &
Authentication
Attributes
Application
Roles
eGov Application
User
Authentic Sources
Legal
Representative
Chief Access
Administrators
Access
Administrators
End
Users
Role ManagementOther
Access Control
Enforcement
CBE
5. Evolution of IAM in eGovernment context
The Belgian CSAM Initiative
5
Co-
existence
Integrated
Common
Identity Management conference June, 18th 2014 London (UK)
6. CSAM =
A cooperation framework, a set of agreements to organise
everything to do with Identity & Access Management in an
e-government context.
Therefore we need:
Agreements and guidelines for:
Identification
Authentication
Authorisation
Access Administration
IT Services:
FAS: service for authentication and identification of persons,
BTB: service to administer access administrators
What is CSAM?
The Belgian CSAM Initiative
Identity Management conference June, 18th 2014 London (UK) 6
As a citizen,
representing
myself
As a citizen, representing an
enterprise
7. FAS: service for authentication
and identification of persons
The Belgian CSAM Initiative
7
Innovation:
One-Time-Password generated by
device, based on eID
Easy to use
Well know by broad audience
Via “Recognition Criteria”
Identity Management conference June, 18th 2014 London (UK)
8. End Users
Appointed by Access Admin
For Role (which is active in
Domain), within Enterprise
BTB: service to administer
access administrators
The Belgian CSAM Initiative
8
Legal Representative of
Enterprise
Defined in Authentic Source
Crossroads Bank for Enterprises
Chief Access Admin
Designated by Legal Repr
For Enterprise
Access Admin
Appointed by Chief Access
Admin
For a group of applications
(in the same ‘domain’)
PIP
PIP
PIP
PIP
Digital signature
with eID
Online procedure
Online procedure
BTB
CBE
Identity Management conference June, 18th 2014 London (UK)
9. Working together clearly results in success!
The Belgian CSAM Initiative
9
Avg# login/week Jan. 2013 : 200k
Avg# login/week Jan. 2014 : 500k
Avg# login/week June 2014 : 700k
Registered enterprises
Today: 115186
Identity Management conference June, 18th 2014 London (UK)
10. THANK YOU!
The Belgian CSAM Initiative
Identity Management conference June, 18th 2014 London (UK) 10
11. The Belgian CSAM Initiative
Identity Management conference June, 18th 2014 London (UK)
Contact & more information
Jan Vanhaecht
Architect for CSAM
Mail: Jan.Vanhaecht@csam.be
Twitter: @janvanhaecht
GSM: +32473625636
http://www.linkedin.com/in/javaha
Wouter Debecker
Service owner CSAM
Mail: Wouter.Debecker@csam.be
Phone: +3227874561
http://www.linkedin.com/in/wouterd
11