Compliance and sectors
IAM in government: staff access managed with evidence
IAM in government makes sure staff and contractors of Dutch municipalities, provinces and water boards gain and lose the right access automatically, with evidence for BIO, ENSIA and the Cyber Security Act. KoppelHet does this with Joinly, which connects the HR system, often Visma Raet YouForce or BCS, to Microsoft Entra ID or Google Workspace.
What it is
Government organisations have many departments, a large application landscape and many contractors. Access is arranged slightly differently per department, and the logging to account for it is often missing.
The Baseline Information Security Government (BIO) is the mandatory framework for central government, municipalities, provinces and water boards. Municipalities report annually through ENSIA. Under the Cyber Security Act, municipalities, provinces and water boards are automatically essential entities, with proactive supervision.
How Joinly handles it
- Accounts are created on hiring and closed on the termination date, recorded in a log.
- Roles per job and department: case handler, policy officer, front desk and team lead each get their own profile.
- Contractors get a mandatory end date.
- Departments and units keep their own roles and setup. Administration is central.
- Provisioning, changes and revocations are logged, which makes the ENSIA self-assessment easier.
- Joinly manages staff accounts, not those of citizens or applicants.
What KoppelHet does
KoppelHet connects HR for Dutch municipalities, water boards and provinces, with YouForce, BCS, AllSolutions, TOPdesk and Entra ID. For IAM, Joinly is the standard. We build integrations to ERP, service desk and occupational health alongside where needed.
Joinly
Continue at Joinly
Joinly is KoppelHet's IAM software. joinly.app shows how the product handles this, with screens, pricing and a demo.
Common integrations
Frequently asked questions
Does Joinly also manage citizens' accounts?
No. Joinly focuses on staff account management, from the HR system. Citizen identities in public services are out of scope.
Does this help with BIO?
Yes. BIO sets requirements for access management, such as role-based access, least privilege and logging. Joinly automates those processes for staff and makes them provable.
Does this help with ENSIA reporting?
Yes. Because provisioning, changes and revocations are logged, access management is easier to account for in the annual self-assessment.
More on Identity and access management
Identity and access management: the overview
Lifecycle
Roles and governance
Integrations
- HR as the sourceThe HR system decides who gets an account, with which data.
- Microsoft Entra IDAccounts, groups and licences in Entra ID from HR.
- Active DirectoryOn-premises AD and hybrid Exchange through an agent without an open port.
- Application provisioningAccounts and roles in your business applications, from HR.
- SCIM and SCIM GatewayThe provisioning standard, also for applications without SCIM.
Compliance and sectors
- NIS2 and the Dutch Cyber Security ActWhat the duty of care asks of access management, and what it does not.
- IAM in educationSchool board staff, ready for the IBP standards framework.
- IAM in governmentMunicipalities, provinces and water boards, with BIO and ENSIA.
- IAM in healthcareFlexible staff, multiple contracts and NEN 7510.