Access procedure
Access to the Filing application is through CSAM, the identification and access management portal for the Belgian government’s online services, or through an IDaaS (identity as a service) solution. In both cases, a valid digital key is required.
Users can choose between several types of digital keys:
- eID or itsme, for use with CSAM;
- eIDAS, for persons outside the EU connected to the eIDAS network, for use with CSAM;
- a digital certificate: issued by GlobalSign (PersonalSign 3 Pro), Isabel (Isabel 6) or Quo Vadis, for use only with the IDaaS solution.
A list of supported certificate authorities (CA) can be found on this page.
IDaaS solution for login with a digital certificate
Since 1 February 2024, authentication with a digital certificate via CSAM to access the Filing application is no longer possible. The FPS Policy and Support (BOSA) discontinued the possibility of authentication by means of a digital certificate when the Federal Authentication Service (FAS) version 2.0 went live on 21 March 2024.
The Central Balance Sheet Office has thus developed an IDaaS (identity as a service) solution to provide an alternative digital certificate-based authentication method outside CSAM to access the Filing application.
This solution provides access to a separate personal space. Please note that it does not allow users to access the personal space associated with their previous connection via CSAM using the same digital certificate.
Use of the same key
Upload, follow-up and payment should always be done using the same digital key, which provides access to an associated personal space. The use of eID (identity card) or itsme is considered a connection with the same digital key.
When a digital key is replaced or its period of validity extended, the key’s data may change. As a result, the key will no longer be recognised and the filing history may be lost.
Use of digital keys
MORE INFO For more information on the use of digital keys, please see Procedure to access the Filing application.
First login
NOTE When logging in via CSAM for the first time, new users must create a profile.
Questions
What should I do if I am unable to log in?
Check that your digital key (login identification) is valid and has been registered before opening the application.
To log in quickly and securely, always start by first clearing your web browser (Google Chrome, Mozilla Firefox or Microsoft Edge):
- Clear the browsing history.
- Clear the download history.
- Delete cookies and other temporary files.
- Clear the cache.
How do I delete my browsing history?
- I use Google Chrome (available in Dutch and French).
- I use Microsoft Edge (available in Dutch and French).
- I use Mozilla Firefox/Mozilla Firefox for MacOS (available in Dutch and French).
Please note that antivirus software or endpoint protection could be installed on the end user’s system, meaning the digital key cannot reach the FAS (Federal Authentication Service) or the CBSO server because, for example, it is blocked by the HTTP headers. In this case, we advise requesting IT assistance to relax the security settings and then trying to log in again.
I see a white or grey screen or an error message when logging in. Is something wrong with the firewall settings?
If you see a blank grey screen when logging in and the following link appears in your browser, there is a problem with the firewall:
https: //filing.cbso.nbb.be/?error=server_error&error_description=AADB2C90047%3a+ The+resource+%27https%3a%2f%2fcbsostorageappp.blob.core.windows.net%2fb2c%
2fux%2fnl%2funified.cshtml%27+contains+script+errors+preventing+it+from+being+loaded
This problem can be resolved by allowing the following urls in your firewall:
login.microsoftonline.com
cbsostorageappp.blob.core.windows.net
b2clogin.com
The following error message also indicates a firewall issue: “ERR_BAD_SSL_CLIENT_AUTH_CERT" or "ERR_EMPTY_RESPONSE”.
In this case as well, it is recommended to seek IT assistance and, in addition, add the following url to the list of trusted sites in your firewall:
cbso-auth.my.evidian.com