You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<p><strong>Requirement: The Credential Issuer MUST place the public key material of the keys it uses to sign Digital Credentials in the <code>jwt_vc_issuer</code> property. The <code>jwt_vc_issuer</code> property MUST include the <code>jwks</code> property that contains the Issuer’s JSON Web Key Set as defined in RFC7517.</strong> (The <code>jwt_vc_issuer</code> property MUST NOT include the <code>jwks_uri</code> property.)</p>
363
363
<p><strong>Requirement: If the <code>openid_credential_issuer</code> property is found in the Entity Configuration, the Wallet MUST use only it and ignore the issuer metadata published in the well-known location defined in OID4VCI.</strong></p>
364
364
<p>The Credential Issuer MAY place additional metadata into the <code>federation_entity</code> Entity Type Identifier.</p>
365
-
<p><strong>Requirement: The metadata in the <code>openid_credential_issuer</code> property MUST override the metadata in the <code>federation_entity</code> property.</strong> For example, if both <code>openid_credential_issuer.display.name</code> and <code>federation_entity.organization_name</code> exist, the Wallet MUST show the value of <code>openid_credential_issuer.display.name</code> as the name of the issuer.</p>
365
+
<p><strong>Requirement: The metadata in the <code>openid_credential_issuer</code> property MUST override the metadata in the <code>federation_entity</code> property.</strong> For example, if both <code>openid_credential_issuer.display.name</code> and <code>federation_entity.organization_name</code> exist, the Wallet MUST show the value of <code>openid_credential_issuer.display.name</code> as the name of the Issuer.</p>
<p><strong>Requirement: The Verifier MUST place verifier metadata into the Entity Configuration, in the <code>openid_credential_verifier</code> property.</strong></p>
<p><strong>Requirement: To establish trust with the issuer (ensure that the issuer can be trusted), the Verifier MUST resolve the Trust Chain from the issuer’s Entity Configuration until it finds a Federation Entity it trusts.</strong>
482
+
<p><strong>Requirement: To establish trust with the Issuer (ensure that the Issuer can be trusted), the Verifier MUST resolve the Trust Chain from the Issuer’s Entity Configuration until it finds a Federation Entity it trusts.</strong>
483
483
<strong>Requirement: The Verifier MUST verify that the credential is signed with a key included in the <code>jwt_vc_issuer</code> metadata in the Entity Configuration of the Issuer. The <code>jwks</code> property in the <code>jwt_vc_issuer</code> must contain a key with the <code>kid</code> value equal to the <code>kid</code> header in the <a class="term-reference" href="#term:sd-jwt-vc">SD-JWT VC</a> credential.</strong></p>
Copy file name to clipboardExpand all lines: spec/federation-profile.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -54,7 +54,7 @@ The Credential Issuer's Entity Configuration can be found by appending the strin
54
54
55
55
The Credential Issuer MAY place additional metadata into the `federation_entity` Entity Type Identifier.
56
56
57
-
**Requirement: The metadata in the `openid_credential_issuer` property MUST override the metadata in the `federation_entity` property.** For example, if both `openid_credential_issuer.display.name` and `federation_entity.organization_name` exist, the Wallet MUST show the value of `openid_credential_issuer.display.name` as the name of the issuer.
57
+
**Requirement: The metadata in the `openid_credential_issuer` property MUST override the metadata in the `federation_entity` property.** For example, if both `openid_credential_issuer.display.name` and `federation_entity.organization_name` exist, the Wallet MUST show the value of `openid_credential_issuer.display.name` as the name of the Issuer.
@@ -199,7 +199,7 @@ If the Issuer chooses to make this kind of distinction between the entity issuin
199
199
200
200
### Trust Establishment
201
201
202
-
**Requirement: To establish trust with the issuer (ensure that the issuer can be trusted), the Verifier MUST resolve the Trust Chain from the issuer's Entity Configuration until it finds a Federation Entity it trusts.**
202
+
**Requirement: To establish trust with the Issuer (ensure that the Issuer can be trusted), the Verifier MUST resolve the Trust Chain from the Issuer's Entity Configuration until it finds a Federation Entity it trusts.**
203
203
**Requirement: The Verifier MUST verify that the credential is signed with a key included in the `jwt_vc_issuer` metadata in the Entity Configuration of the Issuer. The `jwks` property in the `jwt_vc_issuer` must contain a key with the `kid` value equal to the `kid` header in the [[ref: SD-JWT VC]] credential.**
0 commit comments