existing client eligibility service digital identity to be record. requirement (e.g. able to interact with An individual wishes proof of license, the agency online or to update their proof of training) that other agencies address with multiple can be added to through re-use of the agencies, some their digital customer existing verification. agency records have identity profile for An agency launches not been linked reuse with other a new digital service previously (note: agencies. which uses QGov to may only be able to An individual authenticate rely on data engages an agency customers. The matching only for services and agency runs a – interactive requests that they be marketing campaign knowledge-based able to interact with and invite their client authentication may the agency online to register online for not be possible) noting they already access. have a QGov Identity. An individual needs to authenticate to the agency in-person or over the phone (their QGov account could be used to facilitate authentication via MFA SMS) Linking process Linking process Linking process Linking process options: options: options: options: Identity resolution - Nothing specific A one-time A one-time data matching provided the QGov password or password or against verified identity meets the invitation code sent invitation code sent identity attributes, identity proofing by the client IDM a by the client IDM a and interactive requirements of the previously verified previously verified knowledge-based agency service. mobile number or mobile number or authentication registered mobile registered mobile processes [See Note app (push-to-swipe) app (push-to-swipe) 1] or postal address or or postal address or Linked credential human messenger. human messenger. options from pattern 1 above (if available and meets assurance requirements). May be relevant for migration between customer IdPs. Using a shared public identifier that has been verified by
existing client record. An individual wishes to update their address with multiple agencies, some agency records have not been linked previously (note: may only be able to rely on data matching only – interactive knowledge-based authentication may not be possible) eligibility service requirement (e.g. proof of license, proof of training) that can be added to their digital customer identity profile for reuse with other agencies. An individual engages an agency for services and requests that they be able to interact with the agency online noting they already have a QGov Identity. An individual needs to authenticate to the agency in-person or over the phone (their QGov account could be used to facilitate authentication via MFA SMS) digital identity to be able to interact with the agency online or other agencies through re-use of the existing verification. An agency launches a new digital service which uses QGov to authenticate customers. The agency runs a marketing campaign and invite their client to register online for access. Linking process options: Identity resolution - data matching against verified identity attributes, and interactive knowledge-based authentication processes [See Note 1] Linked credential options from pattern 1 above (if available and meets assurance requirements). May be relevant for migration between customer IdPs. Using a shared public identifier that has been verified by Linking process options: Nothing specific provided the QGov identity meets the identity proofing requirements of the agency service. Linking process options: A one-time password or invitation code sent by the client IDM a previously verified mobile number or registered mobile app (push-to-swipe) or postal address or human messenger. Linking process options: A one-time password or invitation code sent by the client IDM a previously verified mobile number or registered mobile app (push-to-swipe) or postal address or human messenger.
2.-Federated-identity-blueprint-Pattern-library-v100.docx