Access procedure
Access to the Filing application is through CSAM, the identification and access management portal for the Belgian government’s online services or through IDAAS. A valid digital key is required.
Users can choose between several types of digital keys:
- eID or itsme, to be used via CSAM;
- eIDAS , for EU foreigners connected to the eIDAS network, to be used via CSAM;
- commercial certificates: GlobalSign (PersonalSign 3 Pro Certificate), Isabel 6, Quo Vadis EU qualified certificate and Quo Vadis BE qualified certificate. These can only be used via IDAAS.
A list of supported certificate authorities (CA) can be found on this page.
IDAAS solution for logging in with a commercial certificate
Since 1 February 2024, authentication via CSAM with a commercial certificate to sign in to the FILING application will no longer be possible. The FPS Policy and Support (BOSA) discontinued the possibility of authentication via commercial certificates when the Federal Authentication Service (FAS) version 2.0 went into production on 21/03/2024.
The technical teams at the Central Balance Sheet Office have developed the IDAAS (Identity As A Service) login to provide an alternative authentication solution outside the CSAM portal that uses commercial certificates to file annual accounts through the FILING application.
This provides access to a separate 'personal space' and the forms in the existing Personal Space linked to the previously available CSAM connection with the same commercial certificate cannot be accessed via the IDAAS connection.
Use of the same key
Upload, follow-up and payment should always be done using the same digital key, as it gives access to an associated personal space. The use of eID (identity card) or itsme is considered logging in with the same digital key.
When a digital key is replaced or its period of validity extended, the key’s data may change. As a result, this key will no longer be recognised and the filing history may be lost.
Use of digital keys
MORE INFO For more information on the use of digital keys, please see Procedure to access the Filing application.
First login
NOTE When logging in via CSAM for the first time, new users must create a profile.
Questions
What should I do if I am unable to log in?
Check that your digital key (login identification) is valid and has been registered before opening the application.
To log in quickly and securely, always start by first clearing your web browser (Google Chrome, Mozilla Firefox or Microsoft Edge):
- Clear the browsing history.
- Clear the download history.
- Delete cookies and other temporary files.
- Clear the cache.
How do I delete my browsing history?
- I use Google Chrome (available in Dutch and French).
- I use Microsoft Edge (available in Dutch and French).
- I use Mozilla Firefox/Mozilla Firefox for MacOS (available in Dutch and French).
Please note that antivirus software or endpoint protection could be installed on the end user’s system, meaning the digital key cannot reach the FAS (Federal Authentication Service) or the CBSO server because, for example, it is blocked by the HTTP headers. In this case, we advise requesting IT assistance to relax the security settings and then trying to log in again.
I see a white or grey screen or an error message when logging in. Is something wrong with the firewall settings?
If you see a blank grey screen when logging in and the following link appears in your browser, there is a problem with the firewall:
https: //filing.cbso.nbb.be/?error=server_error&error_description=AADB2C90047%3a+ The+resource+%27https%3a%2f%2fcbsostorageappp.blob.core.windows.net%2fb2c%
2fux%2fnl%2funified.cshtml%27+contains+script+errors+preventing+it+from+being+loaded
This problem is due to the firewall settings on your PC and can be resolved by allowing the following urls in your firewall:
login.microsoftonline.com
cbsostorageappp.blob.core.windows.net
b2clogin.com
There is also a firewall problem in case of the following error message "ERR_BAD_SSL_CLIENT_AUTH_CERT" or "ERR_EMPTY_RESPONSE".
Also in this case, you should contact your IT manager and additionally allow the following url in your firewall or that of your company in the list of Trusted Sites:
cbso-auth.my.evidian.com