Queensland Digital Identity
If you own or manage an online service for the Queensland Government and need a reliable solution for user authentication, the Queensland Digital Identity offers an efficient and streamlined way to handle the verification process with minimal effort on your part.
The Queensland Digital Identity is the primary digital identity used by the Queensland Government.
About the Queensland Digital Identity
The Queensland Digital Identity is a secure online system that allows individuals to prove their identity. It uses multi-factor authentication to enhance security for users. It is how the Queensland Government establishes that someone is who they say they are when they access government online services.
The Queensland Digital Identity is aligned to the Australian Government Digital ID system. It is designed to keep personal information safe and secure and ensures only the verified individual can access their personal details and services.
Benefits of using the Queensland Digital Identity
The Queensland Digital Identity is modern, robust and innovative, and uses best practice technology to safeguard personal information.
If you are an agency looking to use the Queensland Digital Identity for user identity authentication, you are known as a Relying Party. It provides benefits for both Relying Parties and your customers, including:
- Trusted authentication – Robust multi-factor authentication provides an increased level of security.
- Flexible assurance – Identity proofing levels that can meet your service’s requirements.
- Accurate identity data – Data is verified with the source.
- Fraud reduction – Strong security, unique identity and privacy safeguards reduce identity risk.
- Consistency – A standardised identity solution across Queensland Government services.
- Low effort – As a Relying Party, utilising the Queensland Digital Identity saves you the effort of creating and maintaining a system for authenticating user identities.
Along with distinct identity proofing levels, the Queensland Digital Identity includes mandatory Multifactor Authentication (MFA), which is set up on account creation, and is required on each subsequent login. This provides a greater level of security and gives Relying Parties confidence in the identity of their users.
Identity Proofing levels
Each Queensland Digital Identity has an Identity Proofing level to control which services the customer can access. Agencies use the Queensland Government authentication framework to determine the Identity Proofing level required to access their services.
If a customer’s Queensland Digital Identity does not meet the required Identity Proofing level for the service, they will be asked to strengthen their Queensland Digital Identity. They do this by verifying information from their personal evidence of identity type documents, such as their driver licence, birth certificate or passport.
The Identity Proofing levels available in Queensland Digital Identity are:
- IP1 (very low risk transactions):
- Email and password
- IP1 Plus (low risk transactions):
- Email and password
- 1 verified photo ID or use in the community document
- IP2 (moderate risk transactions):
- Email and password
- 1 verified photo ID or commencement of identity document
- 1 verified use in the community document
Identity Proofing level IP2+ is in development, which will allow relying parties to request a stronger level of Queensland Digital Identity security.
How the Queensland Digital Identity works
When a customer uses their Queensland Digital Identity, the following steps demonstrate the process:
- Customer tries to access a Queensland Government online service. To continue their interaction, they must prove their identity by using a digital identity.
- The customer selects ‘Apply’. The Queensland Digital Identity Exchange (Identity Broker) presents a list of available digital identity providers, including Queensland Digital Identity, for the customer to choose from. Relying parties decide on the list of options presented, as well as which Identity Proofing level their service requires.
- The customer selects the Queensland Digital Identity and either signs up or logs in (if they already have a digital identity). If required, they can strengthen their digital identity with additional verifiable documents.
- The customer is presented with legal name options, based on the identity documents used during verification, and selects their legal name option. The selected name is recorded on their Queensland Digital Identity and returned to the relying party.
- The Identity Broker receives the authenticated customer identity and returns the customer to the relying party.
- The customer continues their interaction.
Example: Strengthening your Queensland Digital Identity
Sam has moved into a new rental property and wants to lodge their bond using the online bond lodgement service. Sam’s recorded Queensland Digital Identity is currently at IP1 Plus as Sam previously only used one document to verify their identity.
The online bond lodgement service requires an IP2 authentication level. Sam selects Queensland Digital Identity, and logs in. They are asked to verify a second document, and after doing so, their Queensland Digital Identity is strengthened to IP2. Sam can now access the rental bond lodgement service.
This strengthened Queensland Digital Identity is permanent and Sam won’t need to repeat the document verification process next time they use any service requiring IP2 or lower.
Next steps and engage with the team
To learn more about the Queensland Digital Identity, email the team at CDISUAT@tmr.qld.gov.au.
To begin the process of connecting your online service, email the Identity broker at engage@smartservice.qld.gov.au.
The Queensland Digital Identity is managed by the Department of Customer Services, Open Data, Small and Family Business.
More information
Visit Queensland Digital Identity.