1. Regulatory readiness
Support DigiD, eHerkenning, and future eIDAS requirements at the required assurance levels.
Industry Pension Administration
Pension funds 16
Participants 3.9 million
Secure Digital Access for Millions of Pension Participants
Customer Story | TKP
TKP is a leading pension administrator operating at the intersection of financial services and large-scale IT architecture. The organisation manages the pension interests of millions of Dutch citizens and provides secure and accessible digital services for participants, employers, and pension funds.
New legislation, stricter security requirements, and the transition to a new pension system made a fundamental redesign of TKP’s identity architecture essential. Together with Booleans, TKP implemented a future-ready identity platform that provides secure and user-friendly access for millions of pension participants. In conversation with two main stakeholders during this project Edward Larkens, IT Manager Database at TKP, and Harry Boekhoudt, IT Manager Platform at TKP, we reflect on the drivers behind the project, the technical complexity, the collaboration, and the key insights that contributed to a successful transformation.
2. Security by design
Implement full separation of data, authorisations, tokens, and token generation processes at pension fund level.
3. User-friendly access
Provide millions of participants and employers with secure digital access without creating unnecessary barriers.
“The relationship between a pension fund and a participant often lasts a lifetime. That means you need to be certain that pension data remains secure while also being easy to access.”
– Edward Larkens I IT Manager Database TKP –
A new reality calls for a new approach
For TKP, Identity & Access Management is much more than a technical component of the IT architecture. It is about providing secure access to the financial data of millions of pension participants. The relationship between a participant and a pension fund often spans a lifetime. That is why access must be secure, trustworthy, and easy to use at the same time.
This balance reflects TKP’s approach to pension communication. Through its Pension Made Easy philosophy, TKP makes complex pension matters understandable and accessible. The same principle applies to digital access: security where necessary, without creating unnecessary barriers.
The immediate trigger for the project was the Dutch Digital Government Act (Wdo). TKP needed to support official digital identity methods such as DigiD, eHerkenning, and later eIDAS at the required assurance levels. The existing environment did not provide sufficient capabilities to support these requirements. At the same time, TKP wanted to fundamentally strengthen the security of its architecture. Not only did data need to be separated per pension fund, but authorisations, tokens, and token generation processes also had to be fully isolated at fund level.
This decision was driven by a clear principle: the security of participant data must be embedded throughout every layer of the landscape, not as an isolated measure, but as a core architectural principle.
Booleans as a critical and practical partner
TKP engaged Booleans to help deliver a complex identity transformation while building its own internal IAM capabilities. With regulatory deadlines approaching and technical complexity increasing, Booleans provided both specialist expertise and strategic guidance.
The collaboration started with a second opinion on an extensive architectural analysis. Booleans translated the findings into practical IAM flows and clear requirements for the Thales OneWelcome implementation, bringing structure and clarity to a complex programme.
As the project progressed, Booleans became an integrated part of the team, working closely with TKP, Thales OneWelcome, and other stakeholders. When Jeffrey, Principal Identity Solution Specialist at Booleans, joined the steering committee, it created greater transparency and alignment between operational execution and strategic decision-making.
Collaboration built on honesty and commitment
The collaboration was characterised by short communication lines, strong commitment, and open dialogue. This approach proved invaluable as TKP worked towards regulatory compliance while managing the complexity of a large-scale transformation. As the programme evolved, Booleans helped keep stakeholders aligned and translated complex challenges into clear actions and decisions. As an independent partner, Booleans remained transparent throughout the process, providing honest advice and helping TKP navigate technical and organisational challenges with confidence.
Jeffrey played a particularly important role in this process. His energy and conviction created confidence during the most challenging phases of the programme. His combination of drive, optimism, and technical expertise helped maintain momentum throughout the project.
Additional complexity along the way
Although the Dutch Digital Government Act (Wdo) was the original driver, the Future Pensions Act (Wtp) introduced additional complexity later in the programme.
At the same time, TKP was implementing a new pension administration system to support pension calculations under the new legislation. As a result, the new identity environment needed to function seamlessly with both existing systems and the new pension landscape.
This required token harmonisation and intelligent solutions to provide participants with a seamless Single Sign-On experience. In some cases, participants needed access to information from both legacy and new systems, significantly increasing the complexity of the identity flows.
In addition, a specific requirement emerged to maintain username and password support for a limited number of pension funds. To ensure continuity of service and maintain programme momentum, a pragmatic temporary solution using Keycloak and Multi-Factor Authentication was implemented. This approach made it possible to accommodate specific customer requirements while keeping the broader transformation on track.
“Jeffrey gave us the confidence that everything would work out. His energy and enthusiasm helped us through the most complex phases of the project.”
– Harry Boekhoudt I IT Manager Platform TKP –
Results: compliant, scalable, and sustainable
Despite the pressure, shifting timelines, and additional complexity, TKP successfully achieved its key milestones. The organisation became Wdo compliant, DigiD and eHerkenning were implemented, and the migration to Thales OneWelcome was completed. The first components supporting the new pension system were also successfully connected. Equally important was the development of internal expertise. Together with Booleans, TKP invested in strengthening its internal IAM capabilities.
During the programme, two new TKP employees received intensive guidance and dedicated training sessions from Booleans, enabling knowledge and experience to be gradually embedded within the organisation.
By the end of 2025, responsibility for managing the platform had been successfully transferred to TKP’s internal team. This was both a significant milestone and a key objective of the programme: enabling TKP to continue independently on its new foundation.
A foundation for the future
With Thales OneWelcome, TKP now has a modern and scalable SaaS platform that is ready for future developments. As digital identity continues to evolve, initiatives such as the European Digital Identity Wallet, new digital signing capabilities, and the growing adoption of eHerkenning can be integrated more easily.
By building a future-ready identity foundation, TKP is well positioned to embrace innovation while remaining focused on what sets the organisation apart: making pension communication and participant services simple, secure, and accessible for millions of Dutch citizens.
TKP’s story shows what happens when identity becomes too important to treat as a technical workstream only. For organisations with complex digital journeys, sensitive customer data or upcoming regulatory pressure, Booleans’ CIAM Conversion and Security Blueprint helps identify where identity creates friction, risk or architectural complexity, and what to do first.
