How to use the eTD Service Catalogue Editor
- 1 Enter the OIN of the service provider and click “Load” (or click “Search” to find it by name) to load its entries from the published catalogue – or use “Import XML”, or start empty with “+ Organisation”.
- 2 Pick an organisation, service definition or instance in the tree and edit it. What you change goes into the export; the checks below the form update as you type.
- 3 Click “Generate XML”, then “Validate” for the server checks (certificates, BSN authorisation, identifier rules). Copy or download the XML for your herkenningsmakelaar.
What the service catalogue is
In the Dutch system of electronic access services (eTD: eHerkenning, eIDAS and related means), every service provider (dienstverlener, DV) that accepts logins is listed in the service catalogue (dienstencatalogus) of the Afsprakenstelsel Elektronische Toegangsdiensten. Herkenningsmakelaars and authentication services read it to know which services exist, which level of assurance they need, which identifiers and attributes they accept and which certificate to encrypt for. The aggregator publishes the combined catalogue for production and pre-production.
An entry consists of a ServiceProvider (the organisation's OIN and name), its ServiceDefinitions (what a service is: name, description, level of assurance, accepted identifiers, requested attributes) and ServiceInstances (where it runs: ServiceID, privacy statement, herkenningsmakelaar, encryption certificates, classifiers and dienstbemiddeling).
What the editor does
- Load an OIN's current entries from the published catalogue, or import XML you have.
- Edit definitions and instances in a tree: names and descriptions in Dutch and English, the level of assurance, entity concerned and acting subject types with set numbers, requested attributes with purpose statements, service restrictions, classifiers, ServiceIntermediation policies, IntermediatedService references, BSNk settings and certificates.
- Apply the rules as you edit: BSN and PseudoID need level eH3 or higher and a BSNk configuration; BSN and the eIDAS legal identifier turn on PublicDomain; eIDAS-inbound excludes eIDAS-outbound and dienstbemiddeling; single sign-on is not allowed at eH4.
- Bulk changes: add or remove a certificate on many instances, or change the level of assurance, herkenningsmakelaar or privacy URL at once.
- Generate the catalogue XML for only the definitions and instances in the export, and validate it: structure, identifier rules, classifiers, dienstbemiddeling, certificate validity and OIN, and whether the OIN is on the BSNk list of parties authorised to use BSN.
What it does not do
The editor prepares an entry; it does not submit it. Your herkenningsmakelaar adds it to the catalogue and checks it. The checks follow the Afsprakenstelsel 1.13 as far as they can be checked from the XML; a clean result is no guarantee of acceptance.
Privacy
Catalogue entries are public information. Your draft is kept in this browser only. Loading fetches the published catalogue on our server; pasted XML is read on our server and not stored.
Sources
Frequently asked questions
What is an OIN?
The Organisatie-identificatienummer, a 20-digit number that identifies an organisation in Dutch government systems. Use the search button to find one by name in the OIN register.
Why is nothing exported after loading?
Loaded entries start outside the export, so the XML contains only what you change. Editing a definition or instance, or switching on “In the export”, puts it in.
What do set numbers mean?
Identifiers with the same set number are required together; different set numbers are alternatives. Without a set number, all types form one set.
Should I fill in acting subject types?
Usually not. ActingSubjectTypesAllowed is reserved for the eIDAS messaging service and BRP; the acting person's pseudonym is delivered automatically.
Is my catalogue stored?
Your draft is kept in this browser only, per copy of the tool. Nothing is stored on our server.
Last updated: