Syntra West SSO & Identity Verification
This document provides application transparency, identity integration details, and data usage policies for the Syntra West Single Sign-On (SSO) authentication system.
1. Application Purpose
The Syntra West identity platform authenticates learners, instructors, and staff across our educational systems and course management portals:
- Cursisten Portal: Enables enrolled students to access class schedules, download digital coursework, and view certifications.
- Docenten Portal: Allows instructors to manage classroom attendance, student rosters, and curriculum files.
- Staff Administration: Provides secure access to internal educational administration tools.
2. Requested OAuth 2.0 Scopes
Authentication strictly requests basic identity claims in accordance with OpenID Connect standards:
| Scope | Type | Justification |
|---|---|---|
openid |
Non-Sensitive | Cryptographically validates the identity token (JWT) during SSO handshake. |
email |
Non-Sensitive | Matches the user with their course enrollment record in the Syntra West database. |
profile |
Non-Sensitive | Retrieves basic user display name for personalizing class rosters and portal dashboards. |
Limited Use Statement: Data obtained via external Identity Providers is used exclusively for identity verification and account provisioning. Data is never shared with third parties or used for marketing.
3. Privacy & Data Security
- Encryption: All login data and token exchanges are secured using Transport Layer Security (TLS 1.3).
- Data Storage: Records are stored in compliance with European GDPR standards on EU cloud infrastructure.
- User Rights: Users can request account deletion or data exports by contacting our privacy team.
4. Organization & Contact
| Legal Entity | Syntra West vzw |
| Website | www.syntrawest.be |
| Privacy Policy | syntrawest.be/privacy |
