Skip to content

Khurdan Government Services Platform

Government services, delivered fast to every citizen — the platform of the Government E-Service Regulatory Agency (ТЦҮЗГ): deliver fast · monitor implementation · evaluate outcomes.

The Khurdan platform (khurdan is Mongolian for “fast”) implements the three core goals of ТЦҮЗГ: deliver government services to citizens quickly, monitor their implementation, and evaluate the results. Its foundation is itself a major strength — a production-ready, security-hardened full stack, so identity, security, AI and service scaffolding come solved from day one.

Open Source

This platform is an open-source project — read the full source, fork it, and run it for your own organization. View on GitHub

  • Deliver fast
    Service catalogue, applications, references, payments, appointments — one stop. Instant eID sign-in and one-tap SSO into connected systems.

  • Monitor implementation
    API-gateway telemetry, request state machine, SLA, officer queues and a hash-chained audit log — progress visible in real time.

  • Evaluate
    Prometheus metrics, OpenTelemetry traces, performance reporting — outcomes measured with hard numbers.

  • A solid foundation
    eID + Government SSO (OIDC), Clean-Architecture Go backend + Next.js 15 BFF, Gemini AI assistant, layered security (RLS · CSP · HSTS · CSRF).

The ecosystem

The platform is composed of several independent services:

Domain Role
sso.dgov.mn Government SSO — OIDC provider + eID Relying Party (holds the eID credentials)
hurdan.dgov.mn / khurdan.dgov.mn Khurdan platform — a relying party of Government SSO (signs in via SSO)

Apps sign in through sso.dgov.mn and call the authorized eID services via a proxy. Only the SSO holds the RP credentials that talk to eID Mongolia, so apps are freed from that security burden.

Key capabilities

  • Authentication — eID (QR / App2App / national-ID push) + Google linking + Government SSO (OIDC).
  • Citizen services portal — catalogue, applications, references, notifications, payments, appointments.
  • OIDC provider — built on its own Go code; apps Sign in with Government SSO.
  • eID PKI profile — organizations, certificates, devices, activity.
  • Document signing (PAdES) — third-party apps sign through the eID sign relay.
  • eID Service Proxy — personal (eid-proxy) and organization (eid-org-proxy), separately.
  • API Gateway — service catalog, per-app authorization, request telemetry — implementation monitoring.
  • AI assistant (Gemini) — chat, voice, translation — guiding citizens to the right service.
  • RBAC & super admin, audit log, observability (metrics · traces) — the evaluation base.

Where to start?

To connect your app to Government SSO, see App integration. To fetch eID data through the proxy, see eID Service Proxy.