AGOV in Business
People perform AGOV login processes in different contexts, for example for themselves as private individuals or acting on behalf of a company, an association, and so on. All actions that are not performed as a private individual are grouped under the term «Business».
In 2027, AGOV will introduce the «Business Account» attribute (Specification). The person creates a dedicated AGOV account, marks it as a Business account, and links it to their work email address, which must be registered under the company domain. The domain of the email address cannot be changed afterwards.
The reachability of this email address is not only checked during onboarding, but is recertified annually by AGOV – or more frequently if AGOV target applications require it.
The “Business Account” attribute is passed on by AGOV in the authentication tokens (OIDC/SAML). Relying Parties can react to this and, for example, grant certain access only to Business Accounts or only to non-Business Accounts.
Significance for organizations
With Business Accounts, organizations gain room for maneuver regarding governance, for example options for revoking identities.
Significance for authorities and public administration
Employee logins can be unequivocally identified as such, and offboarding processes can be mapped.
Legal significance of Business Accounts and their connection with the business email address
The declaration of an AGOV account as a Business Account and the business email address associated with it do not, in and of themselves, have any legal effect. The acting person remains the natural person. Whether and to what extent their actions can be attributed to an organization or are permissible for it is neither determined nor declared by AGOV. It is up to the target systems of the Relying Parties to evaluate the declaratory properties of a Business Account and to determine their significance in the respective technical and legal context.
Further levels of ambition following the primary introduction of Business Accounts
A next level of ambition is to enable organizations to claim their email domain in AGOV and link it to binding register data. The focus here is in particular on verification via DNS entries as well as connection with the UID register and related registers.