provides European level (eIDAS) identity
and GSMA Mobile Connect compliant authentication
IDX is a cloud-enabled Identity Exchange Platform providing authentication, identity management and ID federation technology for government, retail, banking and enterprise use.
Modularity and flexibility
IDX ensures modularity and standards based interfaces to integrate with existing identity and attribute databases, legacy identity and access management (IAM) systems, web and other applications.
Identity and attribute store to manage user data in-house or in the cloud. Provides standard attributes, flexible user profiles, automated import and centralized provisioning. IDX can be integrated with external identity and attribute data sources like government registries, social media profile or enterprise databases.
Authentication service to secure your applications with a set of classic and modern verification methods (PIN, TAN, SMS-OTP, SSL/TLS, PKI, HOTP/TOTP/OCRA, FIDO Alliance, eID card, etc.). The authentication service provides policy -driven, adaptive, risk-based verification of citizens, your clients or the users in your enterprise infrastructure.
Federation service to access web-based services, enterprise infrastructure and applications, cloud services and mobile apps with a single authentication. Supports protocols like SAML, OpenID and OAuth. Credentials, identity data and attributes can be managed by IDX modules and/or IDX can be integrated with external authenticators and identity services like Mobile Connect, social media identity providers or European citizen eIDs (eIDAS Nodes).
Scalability and operations
IDX provably handles millions of users, hundreds of thousands of parallel sessions and thousands of transactions per second. Supports clustering, load-balancing, high availability and deployment in virtual machines or in the cloud. IT operators can control credentials, identity data, attributes and operate the IDX modules through a centralized administration and monitoring console. Operations security and accountability is supported by policy based provisioning, audit and reporting functions.
eIDAS regulation in Europe
The European Parliament and the Council of the European Union have passed in 2014 the Regulation No 910/2014 on "electronic identification and trust services for electronic transactions in the internal market" (eIDAS regulation). The eIDAS regulation provides a predictable regulatory environment to enable secure and seamless electronic interactions between businesses, citizens and public authorities at European level.
European governments have established their online services and identification mechanisms independently in the past. Identification mechanisms may differ in strength and technology, however, the eIDAS regulation ensures that people and businesses can use their own national electronic identification (eID) schemes to access public services in other EU countries.
Case study: Hungarian Government eID
The Hungarian Government’s authentication service (https://gate.gov.hu) has been operational since 2005, and as a result of a major regulatory change in 2012 and technological upgrade in 2014, the service supports the European legal and technological requirements (eIDAS). Hungarian citizens have obtained a valid credential, where registration is based on a highly secure in-person validation of identification data at dedicated citizen service desks.
Hungary is in the forefront of developing and applying latest technological solutions in e-identity federation and efficient use of identity systems in e-government and commercial use of e-identity based on government databases. Hungary is among the first EU governments having eIDAS compliant identity service implementation.