Redefining secure access for Dutch healthcare systems


Who, what & where
Client: Ministry of Health, Welfare and Sport (VWS)
Industry: Public sector, healthcare
Domain: Identity & Access Management (IAM)
Location: The Hague, Netherlands
Goal
The Dutch Ministry of Health, Welfare and Sport wanted to move away from the UZI smart card, the physical card that has long been used by healthcare professionals to access critical systems. They were looking for a secure, modern login that protected privacy, did not store personal data and could flexibly support both national and EU identity standards.
Our role
When VWS needed extra capacity at short notice, we helped the IAM team maintain momentum by embedding Fouad, a full-stack developer with the adaptability to learn quickly, integrate seamlessly, and contribute from day one.
Working closely with government engineers, legal advisors, and healthcare vendors, Fouad co-designed and tested several login mechanisms:
- DigiD, the national digital identity already widely used
- EU Digital Wallet (pilot), aligned with upcoming EU regulations
- UZI Pass, retained as a fallback smartcard option
- Zorgspecifiek Inlogmiddel (PoC), a healthcare-specific OpenID Connect solution
Behind the scenes, the team used trusted standards (OpenID Connect, OAuth2) and developed a custom bridge between legacy SAML and modern systems, ensuring healthcare professionals could continue working without disruption. Interoperability was validated from the start with vendors such as ChipSoft eZorg and COVP.
Result & impact
The proof of concept evolved into a working system, delivered ahead of schedule. Healthcare professionals gained secure, privacy-first access across government and third-party platforms, with full audit trails and no personal data stored.
The project not only met GDPR and ISO requirements but also proved scalable to future EU identity frameworks. It was highlighted in government newsletters and recognised in the healthcare IT community.
For VWS, the benefits went beyond the pilot: they now have a national standard for digital healthcare access, co-developed with their own staff, ensuring both the system and the expertise remain in-house.