How the GLS works

Logon Management

The use of logons, such as a username and password or token, provides confirmation that the person online is the same person that originally established his/her identity. Confidence in the person's identity is proportionate to the strength of the logon used.

The Government Logon Service (GLS) provides logon management for agencies. By separating the rigid link in conventional authentication systems between identity and logon, the GLS is designed to let people opt to use a single logon across government without their identity being shared.

One of the distinguishing features of the authentication approach has been the adoption of principles first and implementation of solutions next. These policy principles have led to world class solutions that are tailored to the New Zealand environment.

The GLS is a step in achieving the 2010 Networked State Services goal of transforming the operation of government through the use of the Internet.

How the GLS Works

For ongoing use, people will start at the agency site and click on the logon button or link. The agency will then direct the user through to the GLS to logon. The GLS confirms that the logon is correct and directs the user back to the agency. With the user's logon confirmed, the agency can now provide access to the online service.

More background design information about the GLS design is available in the document Government Logon Service Design Overview.

Logon Types

There are two levels or strengths of authentication currently on offer:

• For low risk online services, username and password is appropriate

• For moderate risk online services, a token that generates one-time passwords is available

 Other logon types will become available as agencies and their customers' diverse requirements increases.

Single Logon

The service can be used to access government online services more conveniently by using a single logon (such as a username and password). As greater pan-agency online services are introduced, the GLS can be used to facilitate single access to these coordinated and integrated services.

People can choose to combine logons for different services, or they can choose  to keep them separate, the choice is theirs.

Privacy

The Government Logon Service is world-leading in the way it is designed to protect people's privacy. It separates the 'logon' that gives users access to an agency's online services from any information that the agency might hold about those people.

User 'Self Help'

People can go directly to the GLS website to find out more about the service; self help functionality is available related to obtaining and managing their logons; and to view historical transactions and use.

User Support

While extensive service tools are provided online, people will at times require offline support for assistance in resolving their problems. Agencies joining the GLS can provide this direct support to users themselves or opt to use the support service for telephone and email enquiries that the GLS can provide.

Second level technical support for people supporting customers directly, both by agencies themselves and by the GLS support centre, is also part of the service.

Technical Overview

A summary of the high level integration components is provided in the following document, GLS Integration Overview.

For more information contact, authentication@ssc.govt.nz.