Yes, it's a single point of failure by design - but has been pretty stable mostly - with this and a previous attack in June being exceptions.
The identity portal is administered by the department for digital services, but hosted at a commercial provider, Vivicta (formerly TietoEvery, formerly Tieto and Every - Consulting companies from Finland and Norway).