FIAM creates a federated trust network based on the iSHARE trust framework in which participants operate with verifiable organizational identities and shared access agreements. This makes trust reusable: instead of setting up separate trust, legal and onboarding arrangements for every new connection, organizations can rely on one common trust model for secure and scalable collaboration.
A data consumer onboards through FIAM by registering its organization, completing identity verification through eHerkenning and providing an eSeal certificate for machine-to-machine communication. During onboarding, the organization accepts the applicable iSHARE and KPN terms and, where relevant, the provider-specific terms connected to a data service. FIAM then supports the authorization process by recording or validating the permissions under which access may be granted.
When a data consumer requests access, FIAM validates at runtime whether the organization is trusted, whether the required authorization is in place and whether access is still permitted at that moment. This supports a zero-trust approach in which every access request is checked individually, continuously and in context. If permissions, consent or conditions change, access can be withdrawn immediately.
