SLCS Access Policy


There are two conditiions which an AAI user must fulfill in order to be able to gain access to the SWITCHslcs service, namely
  • The user must have a valid AAI account

  • The AAI account creation was dependent on a process, which had one of the following properties
    • Issuance of an identity card, which gives its holder monetary benefits
    • The AAI account has a direct relation to human resources data, which is used for salary payments
    • A registration process with the SLCS RA, which included submission of a copy of a passport or other official identity car.

The table below explains the second set of requirement:

Criteria Explanation Target Group
Issuance of identity card with monetary benefits AAI account creation is tied to a registration process, which has monetary consequences.  The registration process must be such, that there is a one to one mapping between the identity card and the AAI account.  Employees, which get monetary benefits based on a company card
Direct relation to human resources database, which is used for salary payments There is a guaranteed  one to one mapping between human resource salary records and the AAI account Regular employees on payroll
Registration process with SLSC RA This process corresponds to the identity vetting of the classical CA profile. Anybody with an AAI account where the AAI account creation process does not fulfill one of the above conditions


The SWITCHslcs RA devise their own registration process in order to ensure the two requirements.

The detailed (and binding) rules according to which SLCS administrators can enable access to the SLCS service is described in the CP/CPS of the SWITCHslcs CA (chapter 3.2. Initial identity vetting).

The RA is encouraged to contact SWITCH to make sure that their procedures are in accordance with the CP/CPS.