Nafath
Synonyms: Saudi Single Sign-On، Nafath SSO، Nafath App، Nafath Business
Last updated: 2026-05-07
Short Definition
Saudi digital identity verification system, used for logging into government electronic services including Ejar.
Overview
Legal Basis
Nafath is based on the Electronic Transactions Law issued by Royal Decree No. (M/18) of 1428 AH, which gives the electronic signature the same authority as the traditional signature. It is also based on the Digital Government Authority regulations and the Personal Data Protection Law (PDPL) issued in 1444 AH. Every use of Nafath is documented and recorded with a timestamp, and is recognized in courts as evidence of personal approval, and the user cannot deny it later except by proving their account was hacked.
Practical Example
Nawal, an owner of a property in Riyadh, wants to document a rental contract for her apartment in Al-Nakheel district. The real estate broker contacts her after finalizing the agreement with the tenant. Nawal logs into the Ejar app, enters her ID number (1...). The system sends a documentation request to the Nafath app on her phone. Nawal opens Nafath, sees a 2-digit verification number, matches it with the number shown in Ejar, then presses «Approve» and confirms with her fingerprint. Within seconds, her confirmation is recorded as a certified electronic signature and linked to the contract. Later, in case of a dispute, ZATCA or the enforcement court can refer to the Nafath log and prove that Nawal signed at a specific date and time from her registered device.
Common Mistakes
- ✗Sharing the mobile device registered with Nafath with others — any approval via the app is considered a legally binding signature.
- ✗Failing to update the phone number on Absher — Nafath links notifications to the phone number, and not updating disrupts transactions.
- ✗Assuming Nafath replaces written signature in all transactions — in some cases (wills for example) it may not suffice.
- ✗Not verifying the match between the number in Nafath and the platform number — matching is proof that the request is from the same platform and not a phishing attempt.
- ✗Confirming a Nafath request without reading its details — every confirmation has legal consequences, the type of transaction must be verified before approval.
International Differences
Unified digital identity systems differ between countries. In the UAE, UAE Pass offers the same concept and allows access to 6,000+ services, working in cooperation with the Emirates ID. In Turkey, e-Devlet (e-Government) is a unified portal for government services. In Estonia, the globally leading e-Estonia system is considered the most advanced model for unified digital identity. In the UK, GOV.UK Verify was the previous system replaced by One Login. In Singapore, Singpass offers services similar to Nafath. The Saudi advantage of Nafath lies in the high speed of confirmation (seconds), deep integration with all government and private platforms, and support for collective use by entities via Nafath for Business.