Lesson No.
LIÇÃO-PT-004
🇵🇹
PT
Date
2026-05-26
04
Lesson 04 of 08 · Digital identity
PublishedPushSMSEmail

Cartão de Cidadão and Chave Móvel Digital: eIDAS-High authentication notifications

CCartão de Cidadão (CC) and Chave Móvel Digital (CMD) are the two Portuguese digital identity schemes notified at eIDAS-High level. Used in ePortugal, Portal das Finanças, Segurança Social Direta, and increasingly in private services (banks, insurance, utilities). 4notify integrates notifications for authentication, new devices and revocation.
Context

Unauthorized authentication can lead to fiscal address change, fraudulent bank account opening or health data access. Real-time notification lets citizens revoke immediately.

Legal framework
Lei n.º 7/2007 — Cartão de Cidadão

Defines protection duties and immediate revocation for misuse.

Decreto-Lei n.º 88/2009 — Autenticação digital

CC and CMD recognised for qualified signature.

Lesson (steps)
01

AMA integration

AMA is the public body operating CMD. Access via authorised intermediary.

02

Multi-channel for critical events

New device / IP / revocation → push + SMS + email in parallel.

03

Quick-revoke link in SMS

SMS contains shortened URL for immediate revocation on autenticacao.gov.pt.

Code
json
{ "template": "cmd_new_device_alert", "channels": ["push", "sms"], "citizen": { "id_obfuscated": "PT-CC-XX-481923", "phone": "+351912345678" }, "session": { "service": "Portal_Financas", "ip": "85.241.x.x", "device": "Chrome / Win 11", "timestamp": "2026-05-26T10:23:00+01:00" } }
Sample message
SMS

ePortugal: Authentication Portal Finanças from IP 85.241.x.x. Not you? Revoke: autenticacao.gov.pt/revoke/481923

Checklist
  • AMA authorised intermediary certification
  • Quick-revoke link in every notification
  • DPIA per GDPR Art. 35
What 4notify does differently

Ready templates for CC/CMD events with integrated quick-revoke link to autenticacao.gov.pt.

FAQ
Does 4notify have direct AMA access?

No. Access restricted to authorised intermediaries. 4notify serves as deliverer when intermediary forwards event.

Start free

14 days, no card. Support in Portuguese and English.

Other primers