
SURF
eduID is a pioneering initiative by SURF, the collaborative IT backbone for Dutch research and education. eduID is a personal, institution-independent digital identity for all participating in Dutch education and research. With student mobility, cross-institutional learning, and lifelong education on the rise, SURF aimed to create a digital identity that is as versatile and portable as students and staff need to be. The goal is simple and ambitious: move away from fragmented logins and ensure that everyone involved in education, anywhere in the Netherlands, can access services confidently, efficiently, and with their privacy intact.
– Through its contribution to identity verification, Signicat has helped eduID (SURF) reach a key target group, increasing its overall applicability. Their role simplifies processes, making them more reliable and user-friendly. The collaboration demonstrates how trusted partners can support the broader vision of making digital identity in education more accessible, secure, and future-ready.
Product Manager Trust & Identity at SURF
Challenge
Modern education in the Netherlands is becoming more flexible than ever. Students switch institutions, take courses across universities, and increasingly study abroad. Yet, legacy identity systems are stuck in the past. Each new institution brings a new set of credentials. Managing multiple identities creates headaches for users and makes life hard for institutions trying to verify who’s who, especially when it comes to offering cross-institutional services or onboarding international students.
There was no reliable way for a student or researcher to carry a secure digital identity from one institution to another. This led to admin overload, inconsistent experiences, and questions over the trustworthiness of digital identities. For sector-wide digital initiatives and services, these problems aren’t just inconvenient; they are holding back progress.
To sum up, key challenges included:
- Complicated account management for students changing institutions (or following courses across several organisations).
- Difficult access and verification result in limited mobility for international students without Dutch credentials.
- Administrative burdens, as institutions are stretched thin by managing accounts for alumni, guest teachers, or external users.
- Risking unauthorised access or privacy breaches due to a lack of trust in existing verification processes.
- No simple, user-controlled way for individuals to manage their educational data and share it securely as needed.
At the heart of these challenges is one significant need: a trusted, unified digital identity that works independently of institutions, empowers users to control their data, and makes onboarding simple for everyone, including people moving between institutions or coming from outside the Netherlands.
Solution
SURF chose eID Hub as it was more than just ticking boxes. It offered robust digital identity integration as a “one stop shop,” providing trusted, flexible, and future-ready identity verification.
Here’s how it works:
- Strong identity verification for anyone, anywhere. Integration with iDIN (a well-known, bank-based identity service) means professionals or external parties can verify their identities using data already known and trusted by their bank. This enables verification of those not known by institutions.
- International student access became straightforward. With eIDAS, students from EU countries can verify their identity with their own national eID solutions, meeting European standards and making cross-border study or research much easier.
- Institutional link adds another verification layer. If a student already has a verified account with their university, linking this account to eduID confirms their identity even further.
- Flexible for the future. The solution is ready to integrate new national services and adapt to the evolving landscape of European digital identity.
Signicat’s approach simplifies complex things by offering reliability without the usual bureaucracy. The integration was enabled via the eID Hub, providing a one-stop shop that allowed SURF to connect identity sources like IDIN and eIDAS efficiently. This centralised approach meant less custom integration work and ensured scalability for future identity providers like DigiD.

SURF is the IT cooperative of Dutch education and research institutions. Image source
Result
Bringing Signicat’s iDIN and eIDAS solutions into eduID registration makes a real difference. They simplify and secure the registration process, ensuring users can verify their identity quickly and confidently. By integrating iDIN and eIDAS, eduID not only meets high compliance standards but also delivers a smooth experience for users. This approach significantly reduces friction, builds trust, and enhances accessibility, making it easier than ever for individuals to access essential education-related services. With a focus on security and user convenience, the integration has yielded clear results:
- Reliable, trusted identities. Professionals and/or external parties now can verify themselves easily and securely with iDIN, leveraging the KYC rigour of banks. This raised the bar for trust and reduced risk of fraud.
- Confidence for all parties. A user’s eduID with verified identity gives downstream service providers greater certainty. More sensitive services can be unlocked for verified users without additional checks.
- International inclusion. eIDAS enables students from other EU member states to confirm their identities with their own trusted national eIDs. This removes borders for student mobility and makes access equal.
- Reduced admin workload for institutions. A standardised and scalable identity verification model simplifies onboarding not just for students, but also for alumni, guest lecturers, and external researchers – groups that traditionally posed administrative challenges.
- User control and privacy. With eduID, individuals can manage which personal and academic data, such as completed courses and grades, they share with each institution or service. This empowers users, supports GDPR compliance, and aligns with the principle of self-sovereign identity.
- Stronger digital foundations. Layered access means only users with sufficiently verified identities see sensitive data or services, ensuring compliance and peace of mind for everyone involved.
- Future-ready. Adopting European standards and integrating new tools as they arise will futureproof eduID as both technology and policy evolve.
With standards like eIDAS, eduID is ready to adapt as technology and regulation advance. It’s a solid foundation for what’s next.