# walt.id Documentation > walt.id provides digital identity and wallet infrastructure: decentralized identifiers (DIDs), verifiable credentials (W3C VC, IETF SD-JWT VC, ISO mDL/mdoc), and the OID4VC exchange protocols (OID4VCI, OID4VP). There are TWO DISTINCT product lines — do not mix them up: the **Community Stack** (free, open source: Issuer API, Verifier API, Wallet API, libraries) and the **Enterprise Stack** (commercial: multi-tenant platform with organizations/tenants/services, admin APIs, KMS/IAM integrations). Their APIs and base paths differ; always check which stack a page belongs to. Stack versions: Community Stack 0.23.0, Enterprise Stack 0.23.0. Index generated 2026-07-30. How to use these docs as an AI agent: - Every page below links to its raw markdown version (append `.md` to any docs.walt.id page URL). Each raw page carries frontmatter stating its stack, version, and canonical URL. - [Community Stack vs. Enterprise Stack](https://docs.walt.id/community-vs-enterprise.md): Read this first to pick the right stack. ## Full-Text Bundles - [llms-full.txt](https://docs.walt.id/llms-full.txt): Entire documentation (Concepts + both stacks) in a single file, with explicit PART separators between Community and Enterprise content - [llms-community-stack.txt](https://docs.walt.id/llms-community-stack.txt): Concepts + Community Stack only — use this when working with the open-source Issuer/Verifier/Wallet APIs - [llms-enterprise-stack.txt](https://docs.walt.id/llms-enterprise-stack.txt): Concepts + Enterprise Stack only — use this when working with the commercial multi-tenant platform ## API Specifications (machine-readable, OpenAPI 3.1) - [Issuer API — Community Stack](https://issuer.demo.walt.id/api.json): OpenAPI 3.1 spec for the walt.id Community Stack open-source Issuer API ([Swagger UI](https://issuer.demo.walt.id/swagger/index.html)) - [Verifier API — Community Stack](https://verifier.demo.walt.id/api.json): OpenAPI 3.1 spec for the walt.id Community Stack open-source Verifier API ([Swagger UI](https://verifier.demo.walt.id/swagger/index.html)) - [Wallet API — Community Stack](https://wallet.demo.walt.id/api.json): OpenAPI 3.1 spec for the walt.id Community Stack open-source Wallet API ([Swagger UI](https://wallet.demo.walt.id/swagger/index.html)) - [Enterprise API — Enterprise Stack](https://enterprise.sandbox.walt.id/api.json): OpenAPI 3.1 spec for the walt.id Enterprise Stack API ([Swagger UI](https://enterprise.sandbox.walt.id/swagger/index.html)) ## Concepts - [Concepts](https://docs.walt.id/concepts.md): Learn more about the general building blocks of decentralized ID solutions. - [Decentralized Identity](https://docs.walt.id/concepts/decentralized-identity.md): An introduction to Decentralized Identity - [ID Ecosystems](https://docs.walt.id/concepts/id-ecosystems.md): ID ecosystems enable users to control and share their data with others. They are open, user-centric systems that enable direct interactions and the free exchange of identity information. - [Decentralised Identifiers](https://docs.walt.id/concepts/decentralised-identifiers.md): An introduction to Decentralised Identifiers (DIDs) - [Digital Credentials](https://docs.walt.id/concepts/digital-credentials.md): Explore different credential formats below: - [Verifiable Credentials: A Simple Guide to How They Work](https://docs.walt.id/concepts/digital-credentials/verifiable-credentials-w3c.md): This guide clearly explains what Verifiable Credentials (VCs) are, how they work, and provides real-world examples. - [SD-JWT VC Explained: A Practical Guide for 2026](https://docs.walt.id/concepts/digital-credentials/sd-jwt-vc.md): Use selective disclosure. Our guide to SD-JWT VC covers how it works and includes practical code examples. - [What Is a Mobile Driver's License (mDL)? Your 2026 Guide](https://docs.walt.id/concepts/digital-credentials/mdoc-mdl-iso.md): Learn everything about mobile driver's licenses (mDLs). Discover how they work, key security features, and where it is offered. - [Selective Disclosure](https://docs.walt.id/concepts/selective-disclosure.md): Complete guide to selective disclosure and SD-JWTs for privacy-preserving digital identity. Learn how selective disclosure works, which credential formats support it, and how to implement it with walt.id. - [Credential Status & Revocation](https://docs.walt.id/concepts/credential-lifecycle/credential-status-and-revocation.md): The validity of digital credentials are fundamental to make digital identity work. Ensuring that verifiable credentials are up-to-date and valid without compromising user privacy is essential. Let's understand why we… - [Data Exchange Protocols](https://docs.walt.id/concepts/data-exchange-protocols.md): Overview of the different data exchange protocols used in digital identity. - [What is OpenID4VCI? The Developer's Guide (2026)](https://docs.walt.id/concepts/data-exchange-protocols/openid4vci.md): A complete guide to the OpenID4VCI protocol. Understand the full issuance flow, its relation to OpenID4VP, and see practical code examples in one place. - [What is OpenID4VP? The Developer's Guide (2026)](https://docs.walt.id/concepts/data-exchange-protocols/openid4vp.md): A complete guide to OpenID for Verifiable Presentations (OpenID4VP). Learn the protocol flow, DCQL, use cases, and the key differences from OpenID4VC. - [What is the Digital Credentials API? The Developer's Guide (2026)](https://docs.walt.id/concepts/data-exchange-protocols/dc-api.md): A complete guide to the W3C Digital Credentials API (DC-API). Learn how browser-based credential exchange works, its relationship to OpenID4VCI/VP, and practical implementation examples. - [What is the HAIP Profile? The Developer's Guide (2026)](https://docs.walt.id/concepts/data-exchange-protocols/haip.md): A complete guide to the OpenID4VC High Assurance Interoperability Profile (HAIP) v1.0. Learn what HAIP enforces, how it secures digital identity ecosystems, and why it matters for eIDAS 2.0 compliance. - [DCQL: The Developer's Guide to the Digital Credentials Query Language](https://docs.walt.id/concepts/data-exchange-protocols/dcql.md): A complete guide to DCQL (Digital Credentials Query Language). Learn the mental model, credential query anatomy, claim paths, trust filtering, and how credential_sets work. - [Trust Systems](https://docs.walt.id/concepts/trust-systems.md): Understanding trust infrastructure in digital identity ecosystems including EU Trust Lists, ISO mDL trust mechanisms, and wallet attestations - [EU Trust Lists](https://docs.walt.id/concepts/trust-systems/eu-trust-lists.md): Understanding EU Trust Lists, the foundation of trust infrastructure for the European Digital Identity ecosystem under eIDAS 2.0 - [Trust in ISO mDL: VICALs and IACAs](https://docs.walt.id/concepts/trust-systems/iso-trust-vicals.md): Understanding Verified Issuer Certificate Authority Lists (VICALs) and Issuing Authority Certificate Authorities (IACAs) for mobile driver's license trust infrastructure - [Wallet Attestations](https://docs.walt.id/concepts/trust-systems/wallet-attestations.md): Understanding Wallet Instance Attestations (WIA), OAuth 2.0 Attestation-Based Client Authentication, and how issuers and verifiers establish trust with digital wallets ## Community Stack — Overview & Getting Started - [Getting Started](https://docs.walt.id/community-stack/home.md): Learn how to build identity and wallet solutions with walt.id tools. - [Quickstart (5 min)](https://docs.walt.id/community-stack/home/quickstart-5-min.md): In this quickstart guide, we will get ourselves a digital ID wallet, issue a credential into the wallet, and then present that credential to a verifier. - [Tutorial (30 min)](https://docs.walt.id/community-stack/home/tutorial-30-min.md): Starting a new integration? The v2 tutorial covers the same walkthrough using Issuer2, Wallet2, and Verifier2 which fully support OID4VCI V1 and OID4VP V1. This page remains for the original Issuer, Wallet, and Verifier… - [Tutorial v2 (30 min)](https://docs.walt.id/community-stack/home/tutorial-30-min-v2.md): Issue, receive, and verify a Verifiable Credential end-to-end using Issuer2, Wallet2, and Verifier2. - [What is the Community Stack](https://docs.walt.id/community-stack/home/the-community-stack.md): The walt.id Community Stack is a set of open-source tools designed for developers and organizations to build robust end-to-end identity and wallet solutions across industries and ecosystems. It is designed to facilitate… - [FAQs](https://docs.walt.id/community-stack/home/faq.md): Frequently Asked Questions about the walt.id Community Stack ## Community Stack — Issuer - [Getting Started](https://docs.walt.id/community-stack/issuer/getting-started.md): Learn how to issue W3C JWT and SD-JWT credentials via OID4VC using the walt.id issuer API. - [Overview](https://docs.walt.id/community-stack/issuer/capabilities.md): Explore the core Issuer capabilities available in the walt.id Community Stack. - [Issuer Identifiers](https://docs.walt.id/community-stack/issuer/capabilities/did-identifiers.md): How the Community Stack enables issuers to identify themselves using DIDs, X.509 certificates, or direct key references. - [Data & Identity Sourcing](https://docs.walt.id/community-stack/issuer/capabilities/data-sourcing.md): How the Community Stack Issuer obtains and processes the attributes that go into a credential. - [Credential Branding](https://docs.walt.id/community-stack/issuer/capabilities/credential-branding.md): How the Community Stack Issuer lets you present credentials with consistent, configurable visuals. - [Credential Lifecycle](https://docs.walt.id/community-stack/issuer/capabilities/credential-lifecycle.md): How the Community Stack Issuer enables credential status and validity management. - [Credential Templates, Types, and Schemas](https://docs.walt.id/community-stack/issuer/capabilities/credential-templates-types-schemas.md): How the Community Stack models credential types and formats without rigid templating. - [Credential Delivery](https://docs.walt.id/community-stack/issuer/capabilities/credential-delivery.md): How the Community Stack Issuer delivers credentials to wallets using OID4VCI flows. - [Setup](https://docs.walt.id/community-stack/issuer/setup.md): Learn how to install and run the open-source version of the walt.id issuer API. - [Overview](https://docs.walt.id/community-stack/issuer/key-management/overview.md): The issuer API is designed to be stateless and does not store cryptographic key material. Therefore, every API call requires the cryptographic key to be provided. When signing and issuing a credential e.g. via OID4VC,… - [Local](https://docs.walt.id/community-stack/issuer/key-management/local.md): You can create a private and public key using the issuer API using one of the following algorithms: ed25519, secp256k1, secp256r1, or RSA. However, please note that the issuer API does not automatically store any… - [HashiCorp Vault Transit Secrets Engine](https://docs.walt.id/community-stack/issuer/key-management/hashicorp-vault.md): The issuer API can leverage HashiCorp Vault's Transit Secrets Engine to hook into the "cryptography as a service" or "encryption as a service" features provided by HashiCorp Vault. With that, the issuer API can sign and… - [OCI Vault](https://docs.walt.id/community-stack/issuer/key-management/oci-vault.md): OCI Vault (Oracle Cloud Infrastructure Vault) is a service that allows you to store and manage sensitive information such as keys, passwords, and certificates. It provides a secure and centralized location to store and… - [Overview](https://docs.walt.id/community-stack/issuer/key-management/aws-kms/overview.md): The issuer API support AWS KMS as a key management solution. This allows you to store your cryptographic keys in a secure and scalable way. The API is designed to be stateless and does not store cryptographic key… - [SDK](https://docs.walt.id/community-stack/issuer/key-management/aws-kms/sdk.md): This implementation utilizes AWS SDK's default credential provider chain for authentication, automatically detecting credentials from multiple sources including: - [REST API](https://docs.walt.id/community-stack/issuer/key-management/aws-kms/rest-api.md): The issuer API can leverage AWS key management service to hook into the "cryptography as a service" or "encryption as a service" features provided by AWS. With that, the issuer API can sign and verify credentials whilst… - [Azure Key Vault](https://docs.walt.id/community-stack/issuer/key-management/azure-kms/overview.md): The issuer API supports Azure Key Vault as a key management solution. This allows you to store your cryptographic keys in a secure and scalable way. The API is designed to be stateless and does not store cryptographic… - [Azure Key Vault (Azure SDK)](https://docs.walt.id/community-stack/issuer/key-management/azure-kms/sdk.md): Azure Key Vault is a managed cloud service for securely storing and using cryptographic keys, secrets, and certificates. This document describes the native Azure SDK–based integration in the walt.id platform, which… - [Azure Key Vault ( Rest API)](https://docs.walt.id/community-stack/issuer/key-management/azure-kms/rest-api.md): Azure Key Vault is a cloud service for securely storing and managing cryptographic keys, secrets, and certificates. It provides a secure and reliable way to protect sensitive information and control access to keys used… - [Overview](https://docs.walt.id/community-stack/issuer/credential-issuance/overview.md): - W3C VCs - issue W3C Verifiable Credentials with JWT or SD-JWT signatures. - SD-JWT VCs - issue IETF SD-JWT VC credentials. - mDLs - issue Mobile Driver’s License (ISO/IEC 18013-5 mDLs) credentials. - [How to Issue W3C Verifiable Credentials (JWT / SD-JWT) via OID4VCI with walt.id](https://docs.walt.id/community-stack/issuer/credential-issuance/vc-oid4vc.md): Issue W3C Verifiable Credentials via OID4VCI with JWT or SD-JWT using walt.id. Step-by-step guide for developers to launch secure, interoperable VC flows. - [How to Issue SD-JWT-based Verifiable Credentials (IETF | SD-JWT VC) via OID4VCI with walt.id](https://docs.walt.id/community-stack/issuer/credential-issuance/sd-jwt-vc-oid4vc.md): Issue SD-JWT IETF Credentials via OID4VCI using walt.id’s issuer API. For developers; build selective disclosure VCs and a wallet-ready offer URLs. - [How to issue Mobile Driver’s Licenses (ISO/IEC 18013-5 mDL) via OID4VCI with walt.id](https://docs.walt.id/community-stack/issuer/credential-issuance/mdl-oid4vc.md): Developer guide to issue a mobile driving license (mDL) with OID4VCI with walt.id—onboard IACA/DS, sign mdoc, and share a credential offer. - [Data Functions](https://docs.walt.id/community-stack/issuer/credential-issuance/data-functions.md): Populate digital credentials with dynamic data. - [Ecosystems](https://docs.walt.id/community-stack/issuer/ecosystems/overview.md): The walt.id issuer API enables you to issue credentials across various digital identity ecosystems like EBSI. Find a list of supported ecosystems below. - [Overview](https://docs.walt.id/community-stack/issuer/ecosystems/ebsi/overview.md): The European Blockchain Services Infrastructure (EBSI) is a standardized blockchain framework initiated by the European Commission and the European Blockchain Partnership to enhance digital identity and public services… - [Feature Manager](https://docs.walt.id/community-stack/issuer/configurations/feature-manager.md): Use the feature manager to control which issuer API features are enabled at service startup. This reduces complexity and the risk of misconfigurations. - [Logging](https://docs.walt.id/community-stack/issuer/configurations/logging.md): Multiplatform-based, the issuer API logging service enables dynamic reconfigurations, multiple log outputs, and integrations with log aggregator systems supporting various log output formats. Next to that, structured… - [Distributed Architecture](https://docs.walt.id/community-stack/issuer/configurations/distributed-architecture.md): When the Community Stack is cloned and run out-of-the-box as described here there is only one instance of each service started. i.e One instance of the Issuer API, one instance of the Verifier API and one instance of… - [Data Retention](https://docs.walt.id/community-stack/issuer/configurations/data-retention.md): The issuer service stores the following ojects during the issuance process: - [Features](https://docs.walt.id/community-stack/issuer/configurations/config-files/features.md): With the features.conf you can control which issuer API features are enabled. They are managed via the feature manager. - [Credential Issuer Metadata](https://docs.walt.id/community-stack/issuer/configurations/config-files/credential-issuer-metadata.md): The Credential Issuer Metadata, defined by the OID4VC spec, provides detailed information about the issuer's technical and operational capabilities, supported credential types, interaction endpoints, encryption… - [Issuer Service](https://docs.walt.id/community-stack/issuer/configurations/config-files/issuer-service.md): The issuer-service.conf file controls the core runtime settings of the walt.id Issuer API. - [Web](https://docs.walt.id/community-stack/issuer/configurations/config-files/web.md): With the web.conf you can configure the host and port for local network connections. You can find an example below. - [Overview](https://docs.walt.id/community-stack/issuer/protocol-flows/overview.md): Step-by-step sequence diagrams for credential issuance flows via OID4VCI. - [mdoc Issuance via OID4VCI with Cloud KMS](https://docs.walt.id/community-stack/issuer/protocol-flows/mdoc-issuance-oid4vci-kms.md): Full sequence diagram for issuing an mdoc credential via OID4VCI, with signing delegated to an external Cloud KMS (TSE/Vault). - [Overview](https://docs.walt.id/community-stack/issuer/apps/portal/overview.md): A list of credentials to issue and verify via a white-label UI. The credentials available via the portal are fetched from the walt.id credential repository. - [Full API Reference](https://docs.walt.id/community-stack/issuer/full-api-reference.md): Find it here - [FAQs](https://docs.walt.id/community-stack/issuer/faq.md): This page addresses common questions about the walt.id Issuer API for the Community Stack. ## Community Stack — Verifier - [Getting Started](https://docs.walt.id/community-stack/verifier/getting-started.md): Learn how to verify W3C JWT and SD-JWT credentials via OID4VP using the walt.id verifier API. - [Overview](https://docs.walt.id/community-stack/verifier/capabilities.md): Explore the core Verifier capabilities available in the walt.id Community Stack. - [Credential Lifecycle](https://docs.walt.id/community-stack/verifier/capabilities/credential-lifecycle.md): How the Community Stack Verifier checks credential status, expiration, and validity using standard status lists and verification policies. - [Setup](https://docs.walt.id/community-stack/verifier/setup.md): Learn how to install and run the open-source version of the walt.id verifier API. - [Overview](https://docs.walt.id/community-stack/verifier/credential-verification/overview.md): - W3C VCs - request & verify W3C Verifiable Credentials (JWT or SD-JWT signature). - SD-JWT VCs - request & verify IETF SD-JWT VC credentials. - mDLs - request & verify Mobile Driver’s License (ISO/IEC 18013-7 mDLs)… - [How to Verify a W3C Verifiable Credential (JWT / SD-JWT) via OID4VP with walt.id](https://docs.walt.id/community-stack/verifier/credential-verification/vc-oid4vc.md): Learn how to verify W3C verifiable credentials (JWT/SD-JWT) via OID4VP using walt.id’s verifier API—policies, redirects, and cURL examples. - [How to Verify an SD-JWT-based Verifiable Credential (IETF | SD-JWT VC) via OID4VP with walt.id](https://docs.walt.id/community-stack/verifier/credential-verification/sd-jwt-vc-oid4vc.md): Verify SD-JWT IETF credentials via OID4VP with the walt.id Verifier API. For developers: cURL examples, policies, callbacks, and result retrieval. - [How to Verify Mobile Driver’s Licenses (ISO/IEC 18013-7 mDL) via OID4VP with walt.id](https://docs.walt.id/community-stack/verifier/credential-verification/mdl-oid4vc.md): Learn to verify ISO/IEC 18013-5 mobile driver’s licenses via OID4VP with the walt.id Verifier API—step-by-step cURL examples, redirects, and results. - [Overview](https://docs.walt.id/community-stack/verifier/credential-verification/policies/overview.md): Static, parameterized and dynamic verification policies for verifiable credentials. - [Static Verification Policies](https://docs.walt.id/community-stack/verifier/credential-verification/policies/static-verification-policies.md): Predefined and covering a variety of common use cases, enabling developers to verify credentials easily. - [Parameterized Verification Policies](https://docs.walt.id/community-stack/verifier/credential-verification/policies/parameterized-verification-policies.md): Parameterized policies are a type of policy that requires certain parameters or arguments for their execution. - [Dynamic Verification Policies](https://docs.walt.id/community-stack/verifier/credential-verification/policies/dynamic-verification-policies.md): Dynamic verification policies for verifiable credentials. - [Overview](https://docs.walt.id/community-stack/verifier/ecosystems/ebsi/overview.md): The European Blockchain Services Infrastructure (EBSI) is a standardized blockchain framework initiated by the European Commission and the European Blockchain Partnership to enhance digital identity and public services… - [Feature Manger](https://docs.walt.id/community-stack/verifier/configurations/feature-manager.md): Use the feature manager to control which verifier API features are enabled at service startup. This reduces complexity and the risk of misconfigurations. - [Logging](https://docs.walt.id/community-stack/verifier/configurations/logging.md): Multiplatform-based, the issuer API logging service enables dynamic reconfigurations, multiple log outputs, and integrations with log aggregator systems supporting various log output formats. Next to that, structured… - [Distributed Architecture](https://docs.walt.id/community-stack/verifier/configurations/distributed-architecture.md): When the Community Stack is cloned and run out-of-the-box as described here there is only one instance of each service started. i.e One instance of the Issuer API, one instance of the Verifier API and one instance of… - [Data Retention](https://docs.walt.id/community-stack/verifier/configurations/data-retention.md): The verifier service stores the following ojects during the verification process: - [Features](https://docs.walt.id/community-stack/verifier/configurations/config-files/features.md): With the features.conf you can control which verifier API features are enabled. They are managed via the feature manager. - [Verifier Service](https://docs.walt.id/community-stack/verifier/configurations/config-files/verifier-service.md): With the verifier-service.conf, you can configure the external URL and port for accessing the service from outside the local environment. You can find an example below. - [Web](https://docs.walt.id/community-stack/verifier/configurations/config-files/web.md): With the web.conf you can configure the host and port for local network connections. You can find an example below. - [Protocol Flows](https://docs.walt.id/community-stack/verifier/protocol-flows.md): Step-by-step sequence diagrams for credential verification flows via OID4VP. - [mdoc Verification via OID4VP](https://docs.walt.id/community-stack/verifier/protocol-flows/mdoc-verification-oid4vp.md): Full sequence diagram for verifying an mdoc credential via OID4VP, from authorization request to verified presentation. - [Overview](https://docs.walt.id/community-stack/verifier/apps/portal/overview.md): A list of credentials to issue and verify via a white-label UI. The credentials available via the portal are fetched from the walt.id credential repository. - [Full API Reference](https://docs.walt.id/community-stack/verifier/full-api-reference.md): Find it here - [FAQs](https://docs.walt.id/community-stack/verifier/faq.md): This page addresses common questions about the walt.id Verifier API for the Community Stack. ## Community Stack — Wallet - [Getting Started](https://docs.walt.id/community-stack/wallet/getting-started.md):
- [Overview](https://docs.walt.id/community-stack/wallet/capabilities.md): Explore the core Wallet capabilities available in the walt.id Community Stack. - [Setup](https://docs.walt.id/community-stack/wallet/setup.md): Learn how to install and run the open-source version of the walt.id wallet API. - [Overview](https://docs.walt.id/community-stack/wallet/authentication/overview.md): User authentication and session management in the walt.id wallet API. - [Email/Password Auth](https://docs.walt.id/community-stack/wallet/authentication/email-password-auth.md): To create a new user account, you need to send a POST request to the following endpoint: - [Web3 Auth](https://docs.walt.id/community-stack/wallet/authentication/web3-auth.md): Learn how to authenticate users with web3 wallets via the walt.id wallet API. - [X.509 Certificate](https://docs.walt.id/community-stack/wallet/authentication/x.509-certificate.md): 1. Populate the trusted CA conf with the trusted certificates. Learn more here. 2. Enable the feature called trusted-ca, because it's disabled by default, via the feature manager. Learn more here. Once the feature is… - [New and Improved Authentication Strategy](https://docs.walt.id/community-stack/wallet/authentication/new-auth.md): We recently added a new authentication strategy to the wallet which leverages our own waltid-ktor-authnz library - [OIDC Providers](https://docs.walt.id/community-stack/wallet/authentication/jwt-oidc/oidc.md): Learn how to authenticate users using OpenID Connect Providers via the walt.id wallet API. - [OIDC Unique Sub Auth](https://docs.walt.id/community-stack/wallet/authentication/jwt-oidc/oidc-unique-sub-auth.md): With this authentication strategy you can simply provide a valid JWT with a unique subject claim and the wallet-api will create or login a user to the associated wallet account. This way you can use your own… - [Overview](https://docs.walt.id/community-stack/wallet/authentication/jwt-oidc/auth0/overview.md): Learn how to authenticate users with Auth0 via the walt.id wallet API. - [Enter the realm URL](https://docs.walt.id/community-stack/wallet/authentication/jwt-oidc/auth0/configuration.md): We assume that you have an Auth0 account. If you don't have one, you can create a free account here. - [Overview](https://docs.walt.id/community-stack/wallet/authentication/jwt-oidc/keycloak/overview.md): Learn how to authenticate users with Keycloak via the walt.id wallet API. - [Configuration](https://docs.walt.id/community-stack/wallet/authentication/jwt-oidc/keycloak/configuration.md): Learn how to authenticate users with Keycloak via the walt.id wallet API. - [API Endpoints](https://docs.walt.id/community-stack/wallet/authentication/jwt-oidc/keycloak/api-endpoints.md): Learn how to authenticate users with Keycloak via the walt.id wallet API. - [Accounts & Wallets](https://docs.walt.id/community-stack/wallet/accounts-wallets.md): When working with the Wallet API, it is important to understand the difference between an account and a wallet, as they are separate concepts that serve different roles. - [Overview](https://docs.walt.id/community-stack/wallet/key-management/overview.md): Manage user wallet keys via the walt.id wallet API. - [Sign and Verify Messages Feature](https://docs.walt.id/community-stack/wallet/key-management/message-signing.md): This document provides an overview of the "Sign and Verify Messages" feature in the wallet application, which allows users to sign JSON messages using keys managed in the wallet and verify their signatures. This feature… - [Local](https://docs.walt.id/community-stack/wallet/key-management/local.md): Create a set of key pairs for the wallets manged via the wallet API, using one of the following algorithms: ed25519, secp256k1, secp256r1, or RSA. This key will then be stored in the configured database of the wallet… - [HashiCorp Vault Transit Secrets Engine](https://docs.walt.id/community-stack/wallet/key-management/hashicorp-vault.md): Leverage HashiCorp Vault's Transit Secrets Engine to secure keys of wallets managed by the wallet API. - [AWS KMS](https://docs.walt.id/community-stack/wallet/key-management/aws-kms.md): The Wallet API supports AWS KMS as a key management solution. You can utilize AWS KMS to store your cryptographic keys in a secure and scalable way. - [Azure Key Vault](https://docs.walt.id/community-stack/wallet/key-management/azure-key-vault.md): The Wallet API supports Azure Key Vault as a key management solution. You can utilize Azure Key Vault to store your cryptographic keys in a secure and scalable way. - [Overview](https://docs.walt.id/community-stack/wallet/key-management/oci-vault/overview.md): OCI Vault (Oracle Cloud Infrastructure Vault) provides a secure and reliable Key Management Service (KMS) that can be leveraged to safeguard keys of wallets managed by the Wallet API. This document outlines how to… - [REST API](https://docs.walt.id/community-stack/wallet/key-management/oci-vault/rest-api.md): Below you find an example call to create a key in OCI Vault and associate it with a wallet managed by the Wallet API. - [OCI SDK](https://docs.walt.id/community-stack/wallet/key-management/oci-vault/sdk.md): Below you find an example call to create a key in OCI Vault and associate it with a wallet managed by the Wallet API. - [Overview](https://docs.walt.id/community-stack/wallet/did-management/overview.md): Manage user DIDs via the walt.id wallet API. - [DID Web Registry](https://docs.walt.id/community-stack/wallet/did-management/did-web-registry.md): The wallet-api has a build-in DID Web Registry to make did:web's created via API publicly resolvable without the need to host any external services. - [Import dids into your wallet](https://docs.walt.id/community-stack/wallet/did-management/import-dids.md): You can import existing DIDs into your wallet using the following API endpoint: - [List DIDs](https://docs.walt.id/community-stack/wallet/did-management/list-dids.md): Retrieve all DIDs registered in a specific wallet. The response includes the DID string, its method, the associated key ID, and optional alias. - [Overview](https://docs.walt.id/community-stack/wallet/credential-exchange/overview.md): Exchange and import credentials via the walt.id wallet API (OIDC4VCI/OIDC4VP/JWT Import). - [How to Accept W3C Verifiable Credentials via OID4VCI in a Wallet with walt.id](https://docs.walt.id/community-stack/wallet/credential-exchange/guides/accept-w3c-vc-oid4vci.md): Accept W3C verifiable credentials in the walt.id wallet via OID4VCI—learn offer URLs, a simple API call, and code to review and store incoming credentials. - [How to Accept SD-JWT VC Credentials via OID4VCI in a Wallet with walt.id](https://docs.walt.id/community-stack/wallet/credential-exchange/guides/accept-sd-jwt-vc-oid4vci.md): Accept SD-JWT VC credentials (IETF) in the walt.id wallet via OID4VCI—learn the credential offer format, API call, and how selective disclosures appear in the response. - [How to Accept a Mobile Driver’s Licenses (ISO/IEC 18013-5 mDL) in a Wallet with walt.id](https://docs.walt.id/community-stack/wallet/credential-exchange/guides/accept-iso-18013-5-mdl-oid4vci.md): Learn how to accept ISO/IEC 18013-5 mobile driver’s licenses in walt.id using the Wallet API and OID4VCI—clear steps, sample calls, and tips. - [How to Present Digital Credentials (W3C, SD-JWT VC, mDL) Via OID4VP with walt.id](https://docs.walt.id/community-stack/wallet/credential-exchange/guides/present-digital-credentials-oid4vp.md): Step-by-step guide to present verifiable credentials via OID4VP with walt.id’s Wallet API—covering W3C, SD-JWT and mDL. For developers; copy-paste-ready cURL. - [How to Accept Digital Credentials (W3C, SD-JWT VC, mDL) via OID4VC using External Signatures with walt.id](https://docs.walt.id/community-stack/wallet/credential-exchange/guides/accept-digital-credentials-oid4vci-external-signatures.md): Accept W3C, SD-JWT VC and mDL via OID4VC using external signatures with the walt.id Wallet API—prepare/submit flows, proof of possession, and end-to-end examples. - [How to Present Digital Credentials (W3C, SD-JWT VC) via OID4VP using External Signatures with walt.id](https://docs.walt.id/community-stack/wallet/credential-exchange/guides/present-digital-credentials-external-signatures.md): Present W3C and SD-JWT VC via OID4VP using external signatures with the walt.id Wallet API—prepare/submit flows, VP proof creation, and examples. - [Overview](https://docs.walt.id/community-stack/wallet/credential-management/overview.md): Manage and import stored credentials via the walt.id wallet API. - [List Credentials](https://docs.walt.id/community-stack/wallet/credential-management/list-credentials.md): Retrieve all credentials stored in a specific wallet. The response includes the full credential document, parsed content, and metadata such as format and date added. - [View a Credential](https://docs.walt.id/community-stack/wallet/credential-management/view-credential.md): Retrieve the full details of a single credential stored in a wallet by its ID. - [Delete a Credential](https://docs.walt.id/community-stack/wallet/credential-management/delete-credential.md): Remove a credential from a wallet. The operation supports two modes: - [Import a Credential](https://docs.walt.id/community-stack/wallet/credential-management/import-credential.md): Import a signed Verifiable Credential (JWT or SD-JWT) directly into a walt.id wallet via the API. - [Feature Manger](https://docs.walt.id/community-stack/wallet/configurations/feature-manager.md): Use the feature manager to control which wallet API features are enabled at service startup. This reduces complexity and the risk of misconfigurations. - [Logging](https://docs.walt.id/community-stack/wallet/configurations/logging.md): Multiplatform-based, the issuer API logging service enables dynamic reconfigurations, multiple log outputs, and integrations with log aggregator systems supporting various log output formats. Next to that, structured… - [Features](https://docs.walt.id/community-stack/wallet/configurations/config-files/features.md): With the features.conf you can control which wallet API features are enabled. They are managed via the feature manager. - [DB](https://docs.walt.id/community-stack/wallet/configurations/config-files/db.md): DB configuration describes which database should be used for data persistence and the connection string required to connect to the database. - [Auth](https://docs.walt.id/community-stack/wallet/configurations/config-files/auth.md) - [Logins](https://docs.walt.id/community-stack/wallet/configurations/config-files/logins.md): The logins.conf lets you configure which login methods are enabled for wallet authentication - [Web](https://docs.walt.id/community-stack/wallet/configurations/config-files/web.md): With the web.conf you can configure the host and port for local network connections. You can find an example below. - [Registration Defaults](https://docs.walt.id/community-stack/wallet/configurations/config-files/registration-defaults.md): When creating a new account through the Wallet API, a key and associated DID are generated into the wallet of the account. The configuration below allows you to specify the algorithm for the default key and the method… - [Key generation defaults](https://docs.walt.id/community-stack/wallet/configurations/config-files/key-generation-defaults.md) - [OIDC](https://docs.walt.id/community-stack/wallet/configurations/config-files/oidc.md): With the oidc.conf file you can setup OIDC login to enable wallet account authentication using an external OIDC server, like e.g. Keycloak. - [Trusted CA](https://docs.walt.id/community-stack/wallet/configurations/config-files/trusted-ca.md): This authentication method allows clients possessing a X.509 certificate (signed by a CA that is trusted by the Wallet API) to access wallet accounts by signing JWTs themselves. In this process, clients should populate… - [Notifications](https://docs.walt.id/community-stack/wallet/configurations/config-files/notifications.md): This feature is not yet generally available! - [Rejection Reason](https://docs.walt.id/community-stack/wallet/configurations/config-files/rejectionreason.md): This feature is not yet generally available! - [Runtime](https://docs.walt.id/community-stack/wallet/configurations/config-files/runtime.md): The runtime.conf lets you enable mocked responses for certain features. At the moment, it only mocks the responses of the credential categories API endpoints. - [Trust](https://docs.walt.id/community-stack/wallet/configurations/config-files/trust.md): This feature is not yet generally available! - [Full API Reference](https://docs.walt.id/community-stack/wallet/full-api-reference.md): Find it here - [Overview](https://docs.walt.id/community-stack/wallet/apps/overview.md): The walt.id wallet service offers next to the wallet API a set of white-label applications listed below that help you build your use-cases more quickly. - [Overview](https://docs.walt.id/community-stack/wallet/apps/web-wallet/overview.md): White-label digital ID wallet solution to manage keys, DIDs, credentials and tokens. Functionality is powered by the walt.id wallet API making it a custodial solution. - [Try It Out!](https://docs.walt.id/community-stack/wallet/apps/web-wallet/try-it-out!.md): Try the web wallet here - [IOS](https://docs.walt.id/community-stack/wallet/apps/ios.md): Use digital identity features from the walt.id stack to build wallets in iOS environments. - [Android](https://docs.walt.id/community-stack/wallet/apps/android.md): Use digital identity features from the walt.id stack to build wallets in android environments. - [FAQs](https://docs.walt.id/community-stack/wallet/faq.md): This page addresses common questions about the walt.id Wallet API for the Community Stack. ## Community Stack — Verifier2 - [Getting Started](https://docs.walt.id/community-stack/verifier2/getting-started.md): Learn how to verify digital credentials via OID4VP and DC API using the walt.id Verifier2 API. - [Setup](https://docs.walt.id/community-stack/verifier2/setup.md): Learn how to install and run the open-source version of the walt.id verifier2 API. - [Verifying Verifiable Credentials (W3C) via OID4VP](https://docs.walt.id/community-stack/verifier2/credential-verification/vc-oid4vp.md): Learn how to request and verify Verifiable Credentials (W3C) via OID4VP using the walt.id Verifier2 API. - [Verifying SD-JWT VC Credentials via OID4VP](https://docs.walt.id/community-stack/verifier2/credential-verification/sd-jwt-vc-oid4vp.md): Learn how to request and verify SD-JWT VC via OID4VP using the walt.id Verifier2 API. - [Verifying Mobile Driver's Licenses (mDL, ISO/IEC 18013-5) via OID4VP](https://docs.walt.id/community-stack/verifier2/credential-verification/mdl-oid4vp.md): Learn how to request and verify ISO/IEC 18013-5 mobile driver's licenses via OID4VP using the walt.id Verifier2 API. - [Verifying Verifiable Credentials via Digital Credentials API](https://docs.walt.id/community-stack/verifier2/credential-verification/dc-api.md): Request and verify Verifiable Credentials (W3C) via Digital Credentials API (DC API) using the walt.id Verifier2 API. - [Overview](https://docs.walt.id/community-stack/verifier2/policies/overview.md): Static, parameterized and dynamic verification policies for verifiable credentials. - [Policy Configuration Levels](https://docs.walt.id/community-stack/verifier2/policies/configuration.md): The verification policy system supports multiple levels of policy configuration, allowing fine-grained control over which policies are applied to which credentials and presentations. This document explains how policies… - [Available Policies](https://docs.walt.id/community-stack/verifier2/policies/available-policies.md): Checks if a credential has expired based on its notAfter claim. - [Callback and SSE](https://docs.walt.id/community-stack/verifier2/callback-and-sse.md): The verifier service can be configured to use a callback or Server Sent Events (SSE) to be notified when the verification session is completed. - [Feature Manager](https://docs.walt.id/community-stack/verifier2/configurations/feature-manager.md): Control which Verifier2 features are enabled at service startup using the feature manager. - [Features](https://docs.walt.id/community-stack/verifier2/configurations/config-files/features.md): Control which Verifier2 API features are enabled using _features.conf. - [Web](https://docs.walt.id/community-stack/verifier2/configurations/config-files/web.md): Configure the host and port for local network connections using web.conf. - [Verifier Service](https://docs.walt.id/community-stack/verifier2/configurations/config-files/verifier-service.md): Configure the Verifier2 service identity, URL settings, and signing key using verifier-service.conf. - [Dev Mode](https://docs.walt.id/community-stack/verifier2/configurations/config-files/dev-mode.md): Configure development-specific settings for the Verifier2 API using dev-mode.conf. - [Transaction Data Profiles](https://docs.walt.id/community-stack/verifier2/configurations/config-files/transaction-data-profiles.md): Configure transaction data types for OpenID4VP authorization requests using transaction-data-profiles.conf. - [Full API Reference](https://docs.walt.id/community-stack/verifier2/full-api-reference.md): Find it here - [Migrating from Verifier (v1)](https://docs.walt.id/community-stack/verifier2/migration-from-verifier1.md): Guide for migrating from the original Verifier service to Verifier2. ## Community Stack — Issuer2 - [Getting Started](https://docs.walt.id/community-stack/issuer2/getting-started.md): Learn how to issue digital credentials via OID4VCI using the walt.id Issuer2 API. - [Setup](https://docs.walt.id/community-stack/issuer2/setup.md): Learn how to install and run the open-source version of the walt.id Issuer2 API. - [Issuing SD-JWT VC Credentials via OID4VCI](https://docs.walt.id/community-stack/issuer2/credential-issuance/sd-jwt-vc.md): Learn how to issue IETF SD-JWT VC credentials using the walt.id Issuer2 API. - [Issuing W3C Verifiable Credentials via OID4VCI](https://docs.walt.id/community-stack/issuer2/credential-issuance/w3c-vc.md): Learn how to issue W3C Verifiable Credentials with JWT signatures using the walt.id Issuer2 API. - [Issuing Mobile Driver's Licenses (mDL) via OID4VCI](https://docs.walt.id/community-stack/issuer2/credential-issuance/mdl.md): Learn how to issue ISO 18013-5 Mobile Driver's License (mDL) credentials using the walt.id Issuer2 API. - [Overview](https://docs.walt.id/community-stack/issuer2/credential-profiles/overview.md): Learn about credential profiles in the Issuer2 API. - [Overview](https://docs.walt.id/community-stack/issuer2/credential-offers/overview.md): Learn about credential offers in the Issuer2 API. - [Create an Offer](https://docs.walt.id/community-stack/issuer2/credential-offers/create-offer.md): Learn how to create credential offers from profiles in the Issuer2 API. - [Credential Status](https://docs.walt.id/community-stack/issuer2/credential-offers/credential-status.md): How to manage credential status in the Issuer2 API. - [Overview](https://docs.walt.id/community-stack/issuer2/protocol-flows/overview.md): Choosing between the Pre-Authorized Code Flow and the Authorization Code Flow in the Issuer2 API. - [Pre-Authorized Code Flow](https://docs.walt.id/community-stack/issuer2/protocol-flows/pre-authorized-flow.md): Full sequence diagram for issuing a credential via the OID4VCI Pre-Authorized Code Flow. - [Authorization Code Flow](https://docs.walt.id/community-stack/issuer2/protocol-flows/authorization-code-flow.md): Full sequence diagram for issuing a credential via the OID4VCI Authorization Code Flow with an external IdP. - [Feature Manager](https://docs.walt.id/community-stack/issuer2/configurations/feature-manager.md): Control which Issuer2 features are enabled at service startup using the feature manager. - [Features](https://docs.walt.id/community-stack/issuer2/configurations/config-files/features.md): Control which Issuer2 API features are enabled using _features.conf. - [Issuer Service](https://docs.walt.id/community-stack/issuer2/configurations/config-files/issuer-service.md): Reference for the issuer-service.conf configuration file. - [Credential Issuer Metadata](https://docs.walt.id/community-stack/issuer2/configurations/config-files/credential-issuer-metadata.md): Reference for the credential-issuer-metadata.conf configuration file. - [Issuer Profiles](https://docs.walt.id/community-stack/issuer2/configurations/config-files/issuer-profiles.md): Reference for the issuer2-profiles.conf configuration file. - [Authentication Service](https://docs.walt.id/community-stack/issuer2/configurations/config-files/authentication-service.md): Reference for the authentication-service.conf configuration file. - [Dev Mode](https://docs.walt.id/community-stack/issuer2/configurations/config-files/dev-mode.md): Reference for the dev-mode.conf configuration file. - [Persistence](https://docs.walt.id/community-stack/issuer2/configurations/config-files/persistence.md): Reference for the persistence.conf configuration file. - [Web](https://docs.walt.id/community-stack/issuer2/configurations/config-files/web.md): Reference for the web.conf configuration file. - [Data Functions](https://docs.walt.id/community-stack/issuer2/data-functions.md): Populate digital credentials with dynamic data using data functions. - [Notifications](https://docs.walt.id/community-stack/issuer2/notifications.md): Configure webhook notifications for credential issuance events. - [Full API Reference](https://docs.walt.id/community-stack/issuer2/full-api-reference.md): Find it here ## Community Stack — Wallet2 - [Getting Started](https://docs.walt.id/community-stack/wallet2/getting-started.md): Introduction to the Wallet API v2 — a modern wallet service with OID4VCI, OID4VP, and DCQL support. - [Setup](https://docs.walt.id/community-stack/wallet2/setup.md): Learn how to install and run the open-source version of the walt.id Wallet API v2. - [Managing Wallets](https://docs.walt.id/community-stack/wallet2/wallets.md): Create, inspect, and delete wallets in the Wallet API v2. - [Overview](https://docs.walt.id/community-stack/wallet2/key-management/overview.md): How keys work in the Wallet API v2 — generating, importing, and the default key. - [Local Keys](https://docs.walt.id/community-stack/wallet2/key-management/local.md): Generate, import, list, and delete local (JWK) keys in a Wallet API v2 wallet. - [DID Management](https://docs.walt.id/community-stack/wallet2/did-management.md): Create, import, list, and delete DIDs in a Wallet API v2 wallet. - [Overview](https://docs.walt.id/community-stack/wallet2/credential-receiving/overview.md): Receive verifiable credentials into a Wallet API v2 wallet via OID4VCI 1.0. - [SD-JWT VC via OID4VCI](https://docs.walt.id/community-stack/wallet2/credential-receiving/sd-jwt-vc.md): Receive an IETF SD-JWT VC credential into a Wallet API v2 wallet using OID4VCI 1.0. - [W3C VC via OID4VCI](https://docs.walt.id/community-stack/wallet2/credential-receiving/w3c-vc.md): Receive a W3C Verifiable Credential into a Wallet API v2 wallet using OID4VCI 1.0. - [mDL via OID4VCI](https://docs.walt.id/community-stack/wallet2/credential-receiving/mdl.md): Receive an ISO 18013-5 mobile driving licence (mDL) into a Wallet API v2 wallet using OID4VCI 1.0. - [Isolated Flow](https://docs.walt.id/community-stack/wallet2/credential-receiving/isolated-flow.md): Drive OID4VCI credential receiving step by step: isolated endpoints, the authorization-code grant, deferred issuance, and advanced options. - [Overview](https://docs.walt.id/community-stack/wallet2/credential-presenting/overview.md): Present verifiable credentials from a Wallet API v2 wallet via OID4VP 1.0 with DCQL. - [SD-JWT VC via OID4VP](https://docs.walt.id/community-stack/wallet2/credential-presenting/sd-jwt-vc.md): Present an IETF SD-JWT VC credential from a Wallet API v2 wallet using OID4VP 1.0. - [W3C VC via OID4VP](https://docs.walt.id/community-stack/wallet2/credential-presenting/w3c-vc.md): Present a W3C Verifiable Credential from a Wallet API v2 wallet using OID4VP 1.0. - [mDL via OID4VP](https://docs.walt.id/community-stack/wallet2/credential-presenting/mdl.md): Present an ISO 18013-5 mobile driving licence (mDL) from a Wallet API v2 wallet using OID4VP 1.0. - [Isolated Flow](https://docs.walt.id/community-stack/wallet2/credential-presenting/isolated-flow.md): Drive OID4VP credential presentation step by step: resolve the request, DCQL matching, consent previews, and inline presentation. - [Credential Management](https://docs.walt.id/community-stack/wallet2/credential-management.md): List, view, import, and delete credentials held in a Wallet API v2 wallet. - [Feature Manager](https://docs.walt.id/community-stack/wallet2/configurations/feature-manager.md): Control which Wallet API v2 features are enabled at service startup using the feature manager. - [Features](https://docs.walt.id/community-stack/wallet2/configurations/config-files/features.md): Control which Wallet API v2 features are enabled using _features.conf. - [Wallet Service](https://docs.walt.id/community-stack/wallet2/configurations/config-files/wallet-service.md): Reference for the wallet-service.conf configuration file. - [Persistence](https://docs.walt.id/community-stack/wallet2/configurations/config-files/persistence.md): Reference for the wallet2-persistence.conf configuration file. - [Authentication](https://docs.walt.id/community-stack/wallet2/configurations/config-files/auth.md): Reference for the auth.conf configuration file and the authentication endpoints. - [Dev Mode](https://docs.walt.id/community-stack/wallet2/configurations/config-files/dev-mode.md): Reference for the dev-mode.conf configuration file. - [Web](https://docs.walt.id/community-stack/wallet2/configurations/config-files/web.md): Reference for the web.conf configuration file — host and port the wallet service binds to. - [Migration from Wallet API v1](https://docs.walt.id/community-stack/wallet2/migration.md): Learn how to migrate your data from Wallet API v1 to Wallet API v2. - [Full API Reference](https://docs.walt.id/community-stack/wallet2/full-api-reference.md): Explore every Wallet API v2 endpoint via Swagger. ## Community Stack — Mobile Wallet - [Getting Started](https://docs.walt.id/community-stack/mobile-wallet/getting-started.md): Introduction to the Wallet SDK — a modern edge wallet solution built on top of the Walt.id Libraries. ## Enterprise Stack — Overview & Getting Started - [Getting Started](https://docs.walt.id/enterprise-stack/home.md): Learn how to build identity and wallet solutions with the walt.id Enterprise Stack. - [Quickstart (5 min)](https://docs.walt.id/enterprise-stack/home/quickstart-5-min.md): we will be using the walt.id enterprise quickstart repository. It can be used to explore enterprise features via a CLI tool and/or to bring up the whole stack using Docker Compose. We will CLI tool for this guide. - [Tutorial (30 min)](https://docs.walt.id/enterprise-stack/home/tutorial-30-min.md): Want to build against the newer Issuer2, Wallet2, and Verifier2 services supporting OID4VCI V1 and OID4VP V1? Use the v2 tutorial instead. - [Tutorial v2 (30 min)](https://docs.walt.id/enterprise-stack/home/tutorial-30-min-v2.md): Set up the Enterprise Stack and issue, receive, and verify a Verifiable Credential end-to-end using Issuer2, Wallet2, and Verifier2. - [What is the Enterprise Stack](https://docs.walt.id/enterprise-stack/home/the-enterprise-stack.md): We are proud to introduce The Enterprise Stack by walt.id. Enabling businesses and governments to offer highly scalable, reliable and secure digital identity and wallet solutions across industries and ecosystems. - [Building with Walt.id](https://docs.walt.id/enterprise-stack/home/how-to-build.md): How to build a solution with the Walt.id Enterprise Stack - [FAQs](https://docs.walt.id/enterprise-stack/home/faq.md): Frequently Asked Questions about the walt.id Enterprise Stack ## Enterprise Stack — Foundations - [Foundations](https://docs.walt.id/enterprise-stack/foundations.md): Understand the core building blocks of the Enterprise Stack- Organizations, Tenants, Services, and Access Control. ## Enterprise Stack — Capabilities - [Overview](https://docs.walt.id/enterprise-stack/capabilities.md): Discover all Enterprise Stack features for Issuer, Verifier and Wallet: stateful APIs, multi-tenancy, KMS, OID4VCI/VP, SD-JWT, W3C VC, ISO mDL, status lists and eIDAS2. - [Overview](https://docs.walt.id/enterprise-stack/capabilities/issuer.md): Explore the core Issuer capabilities available in the walt.id Enterprise Stack. - [Issuer Identifiers](https://docs.walt.id/enterprise-stack/capabilities/issuer/did-identifiers.md): How the Enterprise Stack enables issuers to identify themselves using DIDs, X.509 certificates, or direct key references. - [Data & Identity Sourcing](https://docs.walt.id/enterprise-stack/capabilities/issuer/data-sourcing.md): Data & Identity Sourcing describes how the Enterprise Stack issuer obtains the attributes that go into a credential – for example name, date of birth, identifiers, roles, or any other claims about the subject. - [Credential Branding](https://docs.walt.id/enterprise-stack/capabilities/issuer/credential-branding.md): How the Enterprise Issuer lets you present credentials with consistent, configurable visuals. - [Credential Lifecycle](https://docs.walt.id/enterprise-stack/capabilities/issuer/credential-lifecycle.md): How the Enterprise Issuer keeps credentials active, suspended, revoked, and expired with standard status lists and tenant-scoped controls. - [Credential Templates, Types, and Schemas](https://docs.walt.id/enterprise-stack/capabilities/issuer/credential-templates-types-schemas.md): Credential Templates, Types, and Schemas explains how the Enterprise Stack models what kind of credential you issue (type) and in which format—while letting you define the “template” logic via your own own system. - [Credential Delivery](https://docs.walt.id/enterprise-stack/capabilities/issuer/credential-delivery.md): Credential Delivery describes how a credential gets from the Enterprise Stack issuer into the holder's wallet. It focuses on the protocol flows used to issue credentials (based on OpenID for Verifiable Credential… - [Overview](https://docs.walt.id/enterprise-stack/capabilities/verifier.md): Explore the core Verifier capabilities available in the walt.id Enterprise Stack. - [Credential Lifecycle](https://docs.walt.id/enterprise-stack/capabilities/verifier/credential-lifecycle.md): How the Enterprise Verifier checks credential status, expiration, and validity using standard status lists and verification policies. - [Overview](https://docs.walt.id/enterprise-stack/capabilities/wallet.md): Explore the core Wallet capabilities available in the walt.id Enterprise Stack. ## Enterprise Stack — Setup - [Setup](https://docs.walt.id/enterprise-stack/setup.md): Learn how to configure, setup and run the Enterprise Stack in different environments. - [Local Development](https://docs.walt.id/enterprise-stack/setup/local-development.md): To run the enterprise stack locally, you need Docker (v20.10.14) and a MongoDB database. Below, you find instructions on how to: - [Overview](https://docs.walt.id/enterprise-stack/setup/deployment/overview.md): Learn how to deploy the Enterprise Stack in different environments. - [Docker Deployment](https://docs.walt.id/enterprise-stack/setup/deployment/docker-deployment.md): This document provides instructions for deploying the walt.id Enterprise API in a Docker environment. It includes configuration details and deployment steps using deployment.yaml. - [Kubernetes Deployment](https://docs.walt.id/enterprise-stack/setup/deployment/kubernetes-deployment.md): This document provides instructions for deploying the walt.id Enterprise API in a Kubernetes environment. It includes configuration details and deployment steps using deployment.yaml. - [AWS Deployment](https://docs.walt.id/enterprise-stack/setup/deployment/aws-deployment.md): The Docker container for the walt.id can be deployed in any Docker environment. Within the AWS cloud, it is recommended to use the ECS or EKS services, but it is also possible to set up test-environments directly on an… - [Azure Deployment](https://docs.walt.id/enterprise-stack/setup/deployment/azure-deployment.md): The image shows a possible architecture of walt.id Enterprise deployed in the Azure Cloud. - [Feature Manager](https://docs.walt.id/enterprise-stack/setup/configurations/feature-manager.md): Use the feature manager to control which Enterprise API features are enabled at service startup. This reduces complexity and the risk of misconfigurations. - [Logging configuration](https://docs.walt.id/enterprise-stack/setup/configurations/logging-configuration.md): The Walt.id Enterprise Service uses Klogging as logging provider. The logging can be configured by the use of predefined logging configurations or by specifying a klogging configuration file. - [Overview](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/overview.md): The Enterprise Stack requires a specific set of configuration files to operate. These files allow you to enable or disable features, configure authentication settings, set token expiration times, specify the endpoints… - [Features](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/features.md): With the features.conf you can control which Enterprise API features are enabled. They are managed via the feature manager. - [Auth](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/auth.md): This configuration file controls user authentication, password management, token expiration, external identity provider (OIDC) login, and external role-to-enterprise-role mapping. - [Database](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/database.md): Within the section mongodb the connection to the MongoDB database is configured. - [Enterprise](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/enterprise.md) - [Super Admin Registration](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/superadmin-registration.md): Using the superadmin-registration.conf file you can provide a list of super admin registration tokens mapped to an email and password. The super admin can be activated as explained here and login as shown here. - [Telemetry](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/telemetry.md): Using the telemetry.conf file, you can configure the telemetry for the Enterprise API. This is an optional feature which can be enabled by adding it to the enabledFeatures list in the features.conf file. When enabled,… - [Web](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/web.md) - [Data Retention](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/data-retention.md): The Enterprise API can automatically purge old issuer and verifier session data to reduce PII retention. This is disabled by default and can be enabled via feature flags and configuration. - [Resource Access](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/resource-access.md): The resource-access.conf file defines reusable credential profiles for external storage and key management services. Instead of embedding credentials inline in every API call, you define named profiles here and… - [Pagination](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/pagination.md): The pagination.conf file defines default and maximum pagination limits used by Enterprise list endpoints that support limit, offset, and, on some endpoints, sort. - [Transaction Data Profiles](https://docs.walt.id/enterprise-stack/setup/configurations/config-files/transaction-data-profiles.md): Configure transaction data types for Enterprise Verifier2 using transaction-data-profiles.conf. ## Enterprise Stack — Administration - [Administration](https://docs.walt.id/enterprise-stack/administration.md): Learn about and how to use administrative features of the Enterprise Stack. - [Overview](https://docs.walt.id/enterprise-stack/administration/organizations/overview.md): The Organization is your account. Under the Organization you can group customers as tenants, sub-tenants, or create a tenant of your own. This way services and their data can be kept virtually separate, enabling you to… - [Create Organizations](https://docs.walt.id/enterprise-stack/administration/organizations/create.md): This documentation outlines the process and rules for creating organizations within the walt.id Enterprise API. - [Overview](https://docs.walt.id/enterprise-stack/administration/tenants/overview.md): Tenants enable you and your customers to launch enterprise services like issuer, verifier, KMS, Credential Web Registry, and more. You can also create sub-tenants inside of tenants and sub-tenants. At this point, there… - [Create Tenants](https://docs.walt.id/enterprise-stack/administration/tenants/create.md): This document outlines how to create a new tenant within an existing organization via the walt.id Enterprise API. If you don't yet have an organization, please go here to learn more. - [Overview](https://docs.walt.id/enterprise-stack/administration/services/overview.md): Services provide the functional capabilities for decentralized identity and ID wallets. They can be created inside of tenants and sub-tenants, then managed through the similar administration interfaces documented on… - [Create Service](https://docs.walt.id/enterprise-stack/administration/services/create.md): Use the resource-api/services/create endpoint to provision new Issuer, Verifier, KMS, DID, or other Enterprise Stack services under an existing tenant. - [List Service Resources](https://docs.walt.id/enterprise-stack/administration/services/list-resources.md): Use resource-api/resources/list to inspect which child resources exist beneath a specific target—this can be a tenant (to see all services) or a service (to see internal resources such as keys, issuance sessions, etc.).… - [Delete Service](https://docs.walt.id/enterprise-stack/administration/services/delete.md): When you need to delete a service (and optionally everything underneath it), you can use the resource-api/resources/delete or /resource-api/resources/delete-recursive endpoints. - [View Service Configuration](https://docs.walt.id/enterprise-stack/administration/services/configuration/view.md): Each Enterprise Stack service provides a /configuration/view endpoint on its service API (such as kms-service-api, issuer-service-api, etc.). Calling this endpoint returns the complete configuration object, exactly as… - [Update Service Configuration](https://docs.walt.id/enterprise-stack/administration/services/configuration/update.md): /configuration/update replaces the configuration of a service. You must send the full service document (not a JSON Patch). This is how you update for example the default key generation options in a KMS or the supported… - [View Service Dependencies](https://docs.walt.id/enterprise-stack/administration/services/dependency-services/view.md): Enterprise Stack services often rely on other services to provide their full functionality. For instance, a Wallet Service might depend on KMS, DID, DID Store, and Credential Store services, and a DID Service can depend… - [Add Service Dependency](https://docs.walt.id/enterprise-stack/administration/services/dependency-services/add.md): To link one service to another, call the /dependencies/add endpoint and specify the service you want to attach as a dependency. For details on which dependency services are supported, refer to the documentation page of… - [Remove Service Dependency](https://docs.walt.id/enterprise-stack/administration/services/dependency-services/remove.md): Call /dependencies/remove to detach a dependency service from the current service. - [Full list of dependency services](https://docs.walt.id/enterprise-stack/administration/services/dependency-services/full-list.md): Our stack is designed to be modular and scalable through a building block style approach. This means you always have the choice to pick and choose which services you need for your solution and configure them as you see… - [View Resource Metadata](https://docs.walt.id/enterprise-stack/administration/services/metadata/view.md): Several storage services—such as DID Store, Credential Store, and KMS—support free-form metadata on their child resources. This lets you add tags, descriptions, or other custom details. The /metadata/view endpoint… - [Set Resource Metadata](https://docs.walt.id/enterprise-stack/administration/services/metadata/set.md): Use /metadata/set to replace the complete metadata object associated with a stored resource. This is handy when you want to initialize metadata for a KMS key, DID, or credential or when you want to overwrite all… - [Update Resource Metadata (JSON Patch)](https://docs.walt.id/enterprise-stack/administration/services/metadata/update.md): /metadata/update lets you modify specific metadata fields without replacing the entire object. It accepts RFC 6902 JSON Patch documents, so you can add, replace, or remove individual fields atomically. - [Purge Resource Metadata](https://docs.walt.id/enterprise-stack/administration/services/metadata/purge.md): /metadata/purge removes the metadata block attached to a stored resource. This is useful when you want to reset tags and descriptions entirely, or before re-initializing metadata with fresh context. - [Query Resources by Metadata](https://docs.walt.id/enterprise-stack/administration/services/metadata/query.md): Use /metadata/query to find child resources (keys, credentials, DIDs, etc.) that match specific metadata constraints. Constraints follow the Presentation Definition format: each field lists a JSON path and an optional… - [Overview](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/overview.md): The walt.id Enterprise Stack provides fine-grained access control using Role-Based Access Control (RBAC) with optional integration into external Identity and Access Management (IAM) systems. - [RBAC Model](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/rbac-model.md): The Enterprise Stack uses Role-Based Access Control (RBAC) to authorize access to APIs and administrative operations. - [Overview](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/roles/overview.md): Roles are named collections of permissions in the Enterprise Stack RBAC model. They provide a way to group related permissions together and assign them to principals (Accounts, API Keys, or external IAM identities). - [Create Roles](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/roles/create-roles.md): Roles are collections of permissions that can be assigned to principals (Accounts, API Keys, or external IAM identities) within a specific organizational scope. - [Overview](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/permissions/overview.md): Permissions are the most granular building blocks of the Enterprise Stack RBAC model. Each protected operation on a resource is tied to a specific permission, enabling fine-grained control across different levels of the… - [Overview](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/accounts/overview.md): Accounts allow users to authenticate with the Enterprise API using email and password credentials. - [Create Account (email)](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/accounts/create-account.md): Accounts can be used to access the Enterprise API using an email address and password. - [Assign Role](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/accounts/assign-role.md): Roles are a set of permissions that can be assigned to Accounts and API-Keys. If you don't have a role yet, you can learn how to create one here. - [Overview](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/super-admin/overview.md): The Super Admin is a special privileged account with unrestricted access to the Enterprise Stack. Unlike regular accounts, Super Admins cannot be created via the API—they can only be activated using a pre-configured… - [Activate Super Admins Accounts](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/super-admin/activate.md): Using the super-admin-token defined in the superadmin-registration.conf file, we can activate the super admin account. - [Use The Super Admin Accounts](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/super-admin/authenticate.md): When we have activated the super admin account, we can use it to authenticate ourselves against the Enterprise APIs or login in the UI. - [Overview](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/api-keys/overview.md): API Keys provide machine-to-machine authentication for the Enterprise API. They are ideal for automated systems, integrations, and services that need to interact with the API programmatically. - [Create API-Key](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/api-keys/create-api-key.md): API-Keys can be used to access the enterprise API. - [Assign Role](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/api-keys/assign-role.md): Roles are a set of permissions that can be assigned to Accounts and API-Keys. If you don't have a role yet, you can learn how to create one here. - [IAM Integration](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/iam-integration.md): The Enterprise Stack integrates with external Identity Providers (IdP) for centralized user authentication and access management. See the access and permissions overview to learn about the broader security architecture. - [External Role Mapping](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/external-role-mapping.md): External Role Mapping automatically assigns Enterprise Stack permissions to users based on their roles in an external Identity Provider (IdP). When users authenticate via OIDC, their IdP roles are mapped to Enterprise… - [Overview](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/external-role-mapping/overview.md): External Role Mapping bridges your Identity Provider's role system with the Enterprise Stack's permission model. This page explains the core concepts and how the mapping process works. - [Configure Identity Provider](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/external-role-mapping/configure-idp.md): Before creating external role mappings, your Identity Provider (IdP) must be configured to include roles in the ID token. This page covers configuration for common providers. - [Create Mappings](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/external-role-mapping/create-mappings.md): This page explains how to create external role mappings using the REST API. - [Manage Mappings](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/external-role-mapping/manage-mappings.md): This page covers how to list, view, update, and delete external role mappings. - [Test Mappings](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/external-role-mapping/test-mappings.md): Before relying on external role mappings in production, test them to ensure they work correctly. The Enterprise Stack provides a resolution endpoint for this purpose. - [Conditional Mappings](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/external-role-mapping/conditional-mappings.md): Conditional mappings add restrictions to when an external role maps to an Enterprise role. This enables fine-grained control over permission assignment. - [Host Aliases](https://docs.walt.id/enterprise-stack/administration/access-and-permissions/host-alias.md): Host aliases enable custom domain routing in the Enterprise Stack, allowing organizations and tenants to be accessed via their own domain names instead of the default subdomain structure. - [Overview](https://docs.walt.id/enterprise-stack/administration/events-and-metrics/overview.md): Track events across all enterprise stack services and features. Events may include actions such as issuing credentials, creating keys, or the creation of a status services. Each event is accompanied by a timestamp and… - [How to query events](https://docs.walt.id/enterprise-stack/administration/events-and-metrics/query-events.md): In this guide we will learn how to retrieve a specific set of events (e.g. VerificationEvent, IssuanceEvent) in a specific scope of the enterprise stack (e.g. in an organization or tenant). Events are enabled by… - [Event Types Overview](https://docs.walt.id/enterprise-stack/administration/events-and-metrics/event-types/event-types-overview.md): - IssuanceEvent - This event tracks the status of credential offers that are initiated through the credentials/issue endpoint of the issuer service. - VerificationEvent - This event tracks the status of credential… - [Issuance Event](https://docs.walt.id/enterprise-stack/administration/events-and-metrics/event-types/issuance-event.md): The IssuanceEvent tracks the status of credential offers that are initiated through the credentials/issue endpoint of the issuer service. - [Verification Event](https://docs.walt.id/enterprise-stack/administration/events-and-metrics/event-types/verification-event.md): The VerificationEvent tracks the status of credential requests that are initiated via the credentials/verify endpoint of the verifier service. - [How to retrieve Metrics](https://docs.walt.id/enterprise-stack/administration/events-and-metrics/retrieve-metrics.md): Metrics are derived from events tracked by the Enterprise Stack. To explore the different types of events available, please click here. By utilizing the events/query endpoint, we can not only fetch the events that have… - [Database Migrations](https://docs.walt.id/enterprise-stack/administration/data/db-migrations.md): The Enterprise Stack includes a MongoDB migration system that keeps the database structure, indexes, and stored data in sync with the version of the Enterprise API you are running. ## Enterprise Stack — Services - [Service Catalog](https://docs.walt.id/enterprise-stack/services.md): Services provide the functional capabilities for decentralized identity and ID wallets. They live inside tenants or sub-tenants, and each instance gets its own configuration so you can run multiple variants of the same… ## Enterprise Stack — Services — Key Management Service - [Overview](https://docs.walt.id/enterprise-stack/services/key-management-service/overview.md): The Key Management Service (KMS) is used for creating, storing, and managing cryptographic keys. It is used by various other services, including: - [Setup](https://docs.walt.id/enterprise-stack/services/key-management-service/setup.md): Tip: Instead of passing AWS KMS or Azure Key Vault credentials inline in every request, you can define reusable KMS profiles in resource-access.conf and reference them by name via configRef. This centralizes credential… - [Local](https://docs.walt.id/enterprise-stack/services/key-management-service/local.md): When using the local configuration for the Key Management Service (KMS), all key information is stored in the Enterprise Stack database. This option is ideal for getting started since it doesn't require any external… - [Azure Key Vault](https://docs.walt.id/enterprise-stack/services/key-management-service/azure-key-vault.md): Azure Key Vault is a cloud service for securely storing and managing cryptographic keys, secrets, and certificates. It provides a secure and reliable way to protect sensitive information and control access to keys used… - [HashiCorp Vault Transit Secrets Engine](https://docs.walt.id/enterprise-stack/services/key-management-service/hashicorp-vault.md): When using the HashiCorp Vault integration with the Enterprise Stack Key Management Service, the Enterprise Stack can leverage HashiCorp Vault's Transit Secrets Engine to hook into the "cryptography as a service" or… - [AWS KMS](https://docs.walt.id/enterprise-stack/services/key-management-service/aws-kms.md): This guide shows you how to create and manage signing keys in AWS KMS through the Enterprise Stack KMS service. - [Full API Reference](https://docs.walt.id/enterprise-stack/services/key-management-service/full-api-reference.md): Find it here ## Enterprise Stack — Services — DID Service - [Overview](https://docs.walt.id/enterprise-stack/services/did-service/overview.md): The DID service enables users to create and resolve various types of Decentralized Identifiers (DIDs). Currently, it supports the following DID methods: - did:key - did:jwk - did:web - [Setup](https://docs.walt.id/enterprise-stack/services/did-service/setup.md): We will setup a DID service inside of a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Using KMS for DID Creation](https://docs.walt.id/enterprise-stack/services/did-service/did-creation/using-kms.md): By default, the DID service can only utilise in-line JWK keys for generating DIDs. However, if you would like to use keys managed by your KMS service you can do so by properly configuring it as a dependency of the DID… - [DID Key](https://docs.walt.id/enterprise-stack/services/did-service/did-creation/did-key.md): Endpoint: /v1/{target}/did-service-api/dids/create/key | API Reference - [DID Web](https://docs.walt.id/enterprise-stack/services/did-service/did-creation/did-web.md): Use the DID Service to generate a did:web identifier and store its DID Document. The endpoint does not publish the document to your domain; make sure the requested domain and path are reachable (e.g., via the DID… - [DID JWK](https://docs.walt.id/enterprise-stack/services/did-service/did-creation/did-jwk.md): Endpoint: /v1/{target}/did-service-api/dids/create/jwk | API Reference - [DID Storage](https://docs.walt.id/enterprise-stack/services/did-service/did-storage.md): By default, the DID service does not save the DIDs (Decentralized Identifiers) and their corresponding DID documents that are created. However, you can enable this feature by using the DID store service. Once the DID… - [Full API Reference](https://docs.walt.id/enterprise-stack/services/did-service/full-api-reference.md): Find it here ## Enterprise Stack — Services — Issuer Service - [Overview](https://docs.walt.id/enterprise-stack/services/issuer-service/overview.md): The Issuer Service is walt.id's enterprise solution for creating, signing and distributing verifiable digital credentials based on various formats and standards. - [Setup](https://docs.walt.id/enterprise-stack/services/issuer-service/setup.md): We will setup an Issuer service inside of a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Issue W3C Credentials (JWT / SD-JWT) via OID4VC](https://docs.walt.id/enterprise-stack/services/issuer-service/credential-issuance/vc-oid4vc.md): Learn how to issue Verifiable Credentials (W3C) via OID4VCI and the walt.id Enterprise issuer API. - [Issue SD-JWT VC Credentials via OID4VC](https://docs.walt.id/enterprise-stack/services/issuer-service/credential-issuance/sd-jwt-vc-oid4vc.md): Learn how to issue SD-JWT VC Credentials via OID4VCI and the walt.id enterprise issuer API. - [Issue Mobile Driver's Licenses (ISO/IEC 18013-5 mDL) via OID4VCI](https://docs.walt.id/enterprise-stack/services/issuer-service/credential-issuance/mdl-oid4vc.md): Sign and issue mDLs (ISO/IEC 18103-5) with the walt.id Enterprise Stack Issuer API. - [Overview](https://docs.walt.id/enterprise-stack/services/issuer-service/configurations/overview.md): The issuer, similar to other services in the Enterprise Stack, maintains a collection of configurations. These configurations include internal configs such as signing keys for access tokens and the base URL, which are… - [General Config](https://docs.walt.id/enterprise-stack/services/issuer-service/configurations/general-config.md): The issuer, similar to other services in the Enterprise Stack, maintains a collection of configurations. These configurations include internal configs such as signing keys for access tokens and the base URL, which are… - [Issuer Display](https://docs.walt.id/enterprise-stack/services/issuer-service/configurations/openid-metadata/issuer-display.md): The issuer metadata display options enable the issuer service to expose details such as issuer name and logo in a standardized way with other services such as digital wallets. These services can then use this… - [Credential Display](https://docs.walt.id/enterprise-stack/services/issuer-service/configurations/openid-metadata/credential-display.md): The Display Metadata feature in the Enterprise Stack enhances credential branding and localization by allowing issuers to define rich, user-friendly visual and textual representations of credentials. These… - [Data Functions](https://docs.walt.id/enterprise-stack/services/issuer-service/data-functions.md): Populate digital credentials with dynamic data. - [Full API Reference](https://docs.walt.id/enterprise-stack/services/issuer-service/full-api-reference.md): Find it here ## Enterprise Stack — Services — Verifier2 Service - [Overview](https://docs.walt.id/enterprise-stack/services/verifier2-service/overview.md): Verifier2 Service enables organizations to verify digital identity credentials. It sends a presentation request to a holder's wallet, receives the signed credential presentation in response, and validates it against… - [Setup](https://docs.walt.id/enterprise-stack/services/verifier2-service/setup.md): We will setup a Verifier service inside of a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Verifying Verifiable Credentials (W3C) via OID4VP](https://docs.walt.id/enterprise-stack/services/verifier2-service/credential-verification/vc-oid4vp.md): Learn how to request and verify Verifiable Credentials (W3C) via OID4VP using the walt.id Enterprise Verifier2 Service. - [Verifying SD-JWT VC Credentials via OID4VP](https://docs.walt.id/enterprise-stack/services/verifier2-service/credential-verification/sd-jwt-vc-oid4vp.md): Learn how to request and verify SD-JWT VC via OID4VP using the walt.id Enterprise Verifier API. - [Verifying Mobile Driver's Licenses (mDL, ISO/IEC 18013-5) via OID4VP](https://docs.walt.id/enterprise-stack/services/verifier2-service/credential-verification/mdl-oid4vp.md): Learn how to request and verify ISO/IEC 18013-5 mobile driver's licenses via OID4VP using the walt.id Enterprise Stack Verifier2 API. - [Verifying Verifiable Credentials via Digital Credentials API](https://docs.walt.id/enterprise-stack/services/verifier2-service/credential-verification/dc-api.md): Request and verify Verifiable Credentials (W3C) via Digital Credentials API (DC API) using the walt.id Enterprise Stack Verifier2 API. - [Overview](https://docs.walt.id/enterprise-stack/services/verifier2-service/policies/overview.md): Static, parameterized and dynamic verification policies for verifiable credentials. - [Policy Configuration Levels](https://docs.walt.id/enterprise-stack/services/verifier2-service/policies/configuration.md): The verification policy system supports multiple levels of policy configuration, allowing fine-grained control over which policies are applied to which credentials and presentations. This document explains how policies… - [Available Policies](https://docs.walt.id/enterprise-stack/services/verifier2-service/policies/available-policies.md): Checks if a credential has expired based on its notAfter claim. - [Overview](https://docs.walt.id/enterprise-stack/services/verifier2-service/configurations/overview.md): The verifier, similar to other services in the Enterprise Stack, maintains a collection of configurations. These configurations include internal configs such as the base URL, which are used solely within the Enterprise… - [OpenID Metadata](https://docs.walt.id/enterprise-stack/services/verifier2-service/configurations/openid-metadata.md): Via the openid-metadata config, the verifier service can be configured to expose details such as verifier name and logo in a standardized way with other services such as digital wallets. These services can then use this… - [Callback and SSE](https://docs.walt.id/enterprise-stack/services/verifier2-service/callback-and-sse.md): The verifier service can be configured to use a callback or Server Sent Events (SSE) to be notified when the verification session is completed. - [Full API Reference](https://docs.walt.id/enterprise-stack/services/verifier2-service/full-api-reference.md): Find it here ## Enterprise Stack — Services — Wallet Service - [Overview](https://docs.walt.id/enterprise-stack/services/wallet-service/overview.md): walt.id's Wallet Service enables organizations and wallet providers to create digital wallets for a variety of use cases. It supports consumer wallets for end users as well as organizational wallets for companies. - [Setup](https://docs.walt.id/enterprise-stack/services/wallet-service/setup.md): There are two ways to set up a new wallet (wallet-service): - [Overview](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-receiving/overview.md): Receive verifiable credentials into an Enterprise wallet service via OID4VCI 1.0 (Wallet API v2). - [SD-JWT VC via OID4VCI](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-receiving/sd-jwt-vc.md): Receive an IETF SD-JWT VC credential into an Enterprise wallet service using OID4VCI 1.0 (Wallet API v2). - [W3C VC via OID4VCI](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-receiving/w3c-vc.md): Receive a W3C Verifiable Credential into an Enterprise wallet service using OID4VCI 1.0 (Wallet API v2). - [mDL / mDoc via OID4VCI](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-receiving/mdl.md): Receive an ISO 18013-5 mDL / mDoc credential into an Enterprise wallet service using OID4VCI 1.0 (Wallet API v2). - [Isolated Flow](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-receiving/isolated-flow.md): Drive OID4VCI 1.0 issuance step by step — isolated endpoints, the authorization-code grant, and deferred issuance — with the Enterprise Wallet API v2. - [Accept W3C Verifiable Credentials via OID4VCI](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-receiving/legacy-draft13/vc-oid4vci.md): Learn how to receive and store W3C Verifiable Credentials via OID4VCI using the walt.id Enterprise wallet API. - [Accept SD-JWT Verifiable Credentials via OID4VCI](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-receiving/legacy-draft13/sd-jwt-vc-oid4vci.md): Learn how to receive and store SD-JWT Verifiable Credentials via OID4VCI using the walt.id Enterprise wallet API. - [Accept mDL/mDOC Credentials via OID4VCI](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-receiving/legacy-draft13/mdl-oid4vci.md): Learn how to receive and store mDL/mDOC credentials via OID4VCI using the walt.id Enterprise wallet API. - [Wallet Management](https://docs.walt.id/enterprise-stack/services/wallet-service/management.md): Learn how to use the wallet management v2 endpoints to list and retrieve keys, DIDs, and credentials stored in a wallet. - [Overview](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-presenting/overview.md): Present verifiable credentials from an Enterprise wallet service via OID4VP 1.0 with DCQL (Wallet API v2). - [SD-JWT VC via OID4VP](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-presenting/sd-jwt-vc.md): Present an IETF SD-JWT VC credential from an Enterprise wallet service using OID4VP 1.0 with DCQL (Wallet API v2). - [W3C VC via OID4VP](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-presenting/w3c-vc.md): Present a W3C Verifiable Credential from an Enterprise wallet service using OID4VP 1.0 with DCQL (Wallet API v2). - [mDL / mDoc via OID4VP](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-presenting/mdl.md): Present an ISO 18013-5 mDL / mDoc credential from an Enterprise wallet service using OID4VP 1.0 with DCQL (Wallet API v2). - [Isolated Flow](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-presenting/isolated-flow.md): Drive OID4VP 1.0 presentation step by step — resolve, DCQL-match, and present — with the Enterprise Wallet API v2. - [Present W3C Verifiable Credentials via OID4VP](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-presenting/legacy-draft20/vc-oid4vp.md): Learn how to present W3C Verifiable Credentials via OID4VP using the walt.id Enterprise wallet API. - [Present SD-JWT Verifiable Credentials via OID4VP](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-presenting/legacy-draft20/sd-jwt-vc-oid4vp.md): Learn how to present SD-JWT Verifiable Credentials via OID4VP using the walt.id Enterprise wallet API. - [Present mDL Verifiable Credentials via OID4VP](https://docs.walt.id/enterprise-stack/services/wallet-service/credential-presenting/legacy-draft20/mdl-oid4vp.md): Learn how to present mDL and other mDoc Verifiable Credentials via OID4VP using the walt.id Enterprise wallet API. - [Intro Silent Issuance & Verification](https://docs.walt.id/enterprise-stack/services/wallet-service/silent-issuance-verification/overview.md): The wallet service is designed with flexibility in mind — both in terms of the types of wallets it supports (e.g., organizational or personal) and how credential exchanges are handled. While most implementations involve… - [Full API Reference](https://docs.walt.id/enterprise-stack/services/wallet-service/full-api-reference.md): Find it here ## Enterprise Stack — Services — Credential Status Service - [Overview](https://docs.walt.id/enterprise-stack/services/credential-status-service/overview.md): The Credential Status service enables users to create, update, and manage status credentials. Status credentials can have different purposes depending on the use-case. The most common purpose is revocation. Currently,… - [Setup](https://docs.walt.id/enterprise-stack/services/credential-status-service/setup.md): We will setup a Credential Status service inside of a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Manage](https://docs.walt.id/enterprise-stack/services/credential-status-service/manage.md): Create, use and manage status credentials. - [Full API Reference](https://docs.walt.id/enterprise-stack/services/credential-status-service/full-api-reference.md): Find it here ## Enterprise Stack — Services — DID Store Service - [Overview](https://docs.walt.id/enterprise-stack/services/did-store-service/overview.md): The DID Store Service provides storage functionalities for managing DIDs & DID documents, including storing, listing, viewing, and deleting them. It can be accessed directly via the Enterprise API or indirectly as a… - [Setup](https://docs.walt.id/enterprise-stack/services/did-store-service/setup.md): We will setup a DID store service inside of a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Full API Reference](https://docs.walt.id/enterprise-stack/services/did-store-service/full-api-reference.md): Find it here ## Enterprise Stack — Services — Credential Store Service - [Overview](https://docs.walt.id/enterprise-stack/services/credential-store-service/overview.md): The Credential Store Service offers various storage functionalities for different types of credentials, including W3C, SD-JWT VC, and mDL. It allows users to store, list, view, and delete these credentials. Also, it… - [Setup](https://docs.walt.id/enterprise-stack/services/credential-store-service/setup.md): We will setup a Credential store service inside of a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Full API Reference](https://docs.walt.id/enterprise-stack/services/credential-store-service/full-api-reference.md): Find it here ## Enterprise Stack — Services — DID Registry - [Overview](https://docs.walt.id/enterprise-stack/services/did-registry/overview.md): A DID Web Registry facilitates the distribution of did:web identifiers and their associated public keys, serving as a trust anchor within decentralized identity ecosystems. - [Setup](https://docs.walt.id/enterprise-stack/services/did-registry/setup.md): We will set up a DID Registry Service inside a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Organization-level DIDs](https://docs.walt.id/enterprise-stack/services/did-registry/organization-level-did.md): The DID Registry Service can manage organization-level DIDs. These DIDs are scoped to the entire organization and are not limited to a specific tenant. They are useful for representing entities that manage or oversee… - [Tenant-Level DIDs](https://docs.walt.id/enterprise-stack/services/did-registry/tenant-level-did.md): The DID Registry Service is designed to work also with tenant-level DIDs. This means that the DIDs it manages are scoped to a specific tenant within the organization. When you create a DID using the DID Service, it will… - [DID WEB Registry Setup Instructions](https://docs.walt.id/enterprise-stack/services/did-registry/did-web-registry-setup-guide.md): This guide shows all requests that are required to initiate a DID Web Registry in combination with the Enterprise API Gateway. - [External DID Web Hosting](https://docs.walt.id/enterprise-stack/services/did-registry/external-did-web-hosting.md): This guide explains how to make DIDs available at a custom domain (e.g., dids.waltid.org) instead of the default enterprise domain. - [Full API Reference](https://docs.walt.id/enterprise-stack/services/did-registry/full-api-reference.md): Find it here ## Enterprise Stack — Services — Holder Policy Store Service - [Overview](https://docs.walt.id/enterprise-stack/services/holder-policy-store-service/overview.md): The Holder Policy service offers a powerful mechanism to enforce rules and logic before a credential is received or presented from a wallet. This allows for fine-grained control, ensuring that data sharing meets… - [Setup](https://docs.walt.id/enterprise-stack/services/holder-policy-store-service/setup.md): We will setup a holder policy store service inside of a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Create a Holder Policy](https://docs.walt.id/enterprise-stack/services/holder-policy-store-service/policy-creation.md): Endpoint: /v1/{target}/policy-store-service-api/policies/add | API Reference - [Usage with Wallet Service](https://docs.walt.id/enterprise-stack/services/holder-policy-store-service/policy-usage.md): Once the Policy Store is set up and attached to a wallet service, it can be used during the verification flow and or the issuance flow. When a wallet attempts to present or receive a credentials, the policies defined in… ## Enterprise Stack — Services — Issuer2 Service - [Overview](https://docs.walt.id/enterprise-stack/services/issuer2-service/overview.md): Issue verifiable digital credentials via OID4VCI using the walt.id Enterprise Issuer2 Service. - [Setup](https://docs.walt.id/enterprise-stack/services/issuer2-service/setup.md): Create an Issuer2 service inside a tenant using the walt.id Enterprise Stack. - [Issuing SD-JWT VC Credentials via OID4VCI](https://docs.walt.id/enterprise-stack/services/issuer2-service/credential-issuance/sd-jwt-vc.md): Learn how to issue IETF SD-JWT VC credentials end to end using the walt.id Enterprise Issuer2 Service. - [Issuing W3C VC Credentials via OID4VCI](https://docs.walt.id/enterprise-stack/services/issuer2-service/credential-issuance/w3c-vc.md): Learn how to issue W3C Verifiable Credentials end to end using the walt.id Enterprise Issuer2 Service. - [Issuing Mobile Driver's Licenses (mDL) via OID4VCI](https://docs.walt.id/enterprise-stack/services/issuer2-service/credential-issuance/mdl.md): Learn how to issue ISO 18013-5 mDL / mDoc credentials end to end using the walt.id Enterprise Issuer2 Service. - [Overview](https://docs.walt.id/enterprise-stack/services/issuer2-service/credential-profiles/overview.md): Learn about credential profiles in the walt.id Enterprise Issuer2 Service. - [Create a Credential Profile](https://docs.walt.id/enterprise-stack/services/issuer2-service/credential-profiles/create-profile.md): Learn how to create a credential profile for the walt.id Enterprise Issuer2 Service. - [Manage Credential Profiles](https://docs.walt.id/enterprise-stack/services/issuer2-service/credential-profiles/manage-profiles.md): Learn how to view, update, and delete credential profiles in the walt.id Enterprise Issuer2 Service. - [Overview](https://docs.walt.id/enterprise-stack/services/issuer2-service/credential-offers/overview.md): Learn about credential offers in the walt.id Enterprise Issuer2 Service. - [Create a Credential Offer](https://docs.walt.id/enterprise-stack/services/issuer2-service/credential-offers/create-offer.md): Learn how to create credential offers from profiles in the walt.id Enterprise Issuer2 Service. - [Overview](https://docs.walt.id/enterprise-stack/services/issuer2-service/protocol-flows/overview.md): Choosing between the Pre-Authorized Code Flow and the Authorization Code Flow in the walt.id Enterprise Issuer2 Service. - [Pre-Authorized Code Flow](https://docs.walt.id/enterprise-stack/services/issuer2-service/protocol-flows/pre-authorized-flow.md): Full sequence diagram for issuing a credential via the OID4VCI Pre-Authorized Code Flow with the walt.id Enterprise Issuer2 Service. - [Authorization Code Flow](https://docs.walt.id/enterprise-stack/services/issuer2-service/protocol-flows/authorization-code-flow.md): Full sequence diagram for issuing a credential via the OID4VCI Authorization Code Flow with an external IdP in the walt.id Enterprise Issuer2 Service. - [Overview](https://docs.walt.id/enterprise-stack/services/issuer2-service/configurations/overview.md): Configuration options for the walt.id Enterprise Issuer2 Service. - [Display Configuration](https://docs.walt.id/enterprise-stack/services/issuer2-service/configurations/display-configuration.md): Configure how your issuer appears in wallets via OpenID metadata in the walt.id Enterprise Issuer2 Service. - [Credential Types Configuration](https://docs.walt.id/enterprise-stack/services/issuer2-service/configurations/credential-types.md): Configure the supported credential types (credentialConfigurations) for your Issuer2 Service. - [Status List Aggregation](https://docs.walt.id/enterprise-stack/services/issuer2-service/configurations/status-list-aggregation.md): Learn how status lists are aggregated and exposed for offline verification in the walt.id Enterprise Issuer2 Service. - [Rate Limiting](https://docs.walt.id/enterprise-stack/services/issuer2-service/configurations/rate-limiting.md): Configure request rate limits and Redis-backed failure backoff for the Enterprise Issuer2 Service. - [Data Functions](https://docs.walt.id/enterprise-stack/services/issuer2-service/data-functions.md): Populate digital credentials with dynamic data. - [Notifications & Session Events](https://docs.walt.id/enterprise-stack/services/issuer2-service/notifications.md): Track credential issuance events in real time via webhooks or Server-Sent Events in the walt.id Enterprise Issuer2 Service. - [Full API Reference](https://docs.walt.id/enterprise-stack/services/issuer2-service/full-api-reference.md): Complete Swagger API reference for the walt.id Enterprise Issuer2 Service. ## Enterprise Stack — Services — X509 Store Service - [Overview](https://docs.walt.id/enterprise-stack/services/x509-store-service/overview.md): The X.509 Store Service manages the peristence of X.509 certificates inside the Enterprise resource tree. It supports both generic certificate entries and VICAL entries for IACA certificates. - [Setup](https://docs.walt.id/enterprise-stack/services/x509-store-service/setup.md): Create an X.509 Store service when you need to persist certificates directly through the Enterprise API or indirectly from an attached X.509 Certificate Service. - [Manage Certificates](https://docs.walt.id/enterprise-stack/services/x509-store-service/manage-certificates.md): Use the X.509 Store Service to store generic certificates or VICAL entries, list what is already stored, and manage individual entries by full target path. ## Enterprise Stack — Services — X509 Service - [Overview](https://docs.walt.id/enterprise-stack/services/x509-service/overview.md): The X.509 Certificate Service issues X.509 certificates for PKI deployments, including ISO/IEC 18013-5 compliant certificates for mobile driving licence (mDL) ecosystems. It supports self-signed IACA certificates,… - [Setup](https://docs.walt.id/enterprise-stack/services/x509-service/setup.md): Create an X.509 Certificate Service when you need to issue IACA or Document Signer certificates through the Enterprise API. - [Issue Certificates](https://docs.walt.id/enterprise-stack/services/x509-service/issue-certificates.md): Use the X.509 Certificate Service to issue IACA root certificates, Document Signer certificates, and generic X.509 certificates. - [CSR Workflows](https://docs.walt.id/enterprise-stack/services/x509-service/csr-workflows.md): The X.509 Certificate Service supports PKCS#10 Certificate Signing Request (CSR) creation and CSR-based certificate issuance. This enables proof-of-possession workflows where the certificate requester proves control of… ## Enterprise Stack — Services — Vical Service - [Overview](https://docs.walt.id/enterprise-stack/services/vical-service/overview.md): The VICAL Service publishes signed Verifiable Issuer Certificate Authority Lists (VICALs) for mdoc and mDL ecosystems. Each published version is built from the vical-entry certificates stored in its linked X.509 Store… - [Setup](https://docs.walt.id/enterprise-stack/services/vical-service/setup.md): Create a VICAL Service when you need to publish signed VICAL feeds from stored IACA certificates. - [Publish and Resolve VICAL Versions](https://docs.walt.id/enterprise-stack/services/vical-service/publish-and-resolve.md): Use the authenticated publication routes to create new signed versions, then use the public registry routes to distribute the latest or a specific published version. ## Enterprise Stack — Services — Trust Registry Service - [Overview](https://docs.walt.id/enterprise-stack/services/trust-registry-service/overview.md): The Trust Registry Service manages ETSI trust lists for credential verification. It enables verifying whether a credential issuer is listed in an official trust list—such as an EU member state's Trusted Service List… - [Setup](https://docs.walt.id/enterprise-stack/services/trust-registry-service/setup.md): Create a Trust Registry Service instance for your organization. - [Trust Source Management](https://docs.walt.id/enterprise-stack/services/trust-registry-service/trust-source-management.md): Each trust source is identified by a unique sourceId. Loading a source validates its format, applies the selected acceptance policy, and atomically activates the normalized entities, services, and certificate identities. - [Trust Resolution](https://docs.walt.id/enterprise-stack/services/trust-registry-service/trust-resolution.md): Directly query trust status against the loaded trust sources. Use these endpoints to resolve whether a certificate, certificate fingerprint, or provider ID is trusted — for example, when debugging trust decisions,… - [Verifier Integration](https://docs.walt.id/enterprise-stack/services/trust-registry-service/verifier-integration.md): Link the Trust Registry to a Verifier2 Service to enable automatic trust verification during credential presentation. This allows the etsi-trust-list policy to resolve issuer certificates without external network calls… - [Full API Reference](https://docs.walt.id/enterprise-stack/services/trust-registry-service/full-api-reference.md): Find it here ## Enterprise Stack — Services — Client Attestation Service - [Overview](https://docs.walt.id/enterprise-stack/services/client-attestation-service/overview.md): The Client Attestation Service enables secure wallet authentication during credential issuance flows. It implements the OAuth 2.0 Attestation-Based Client Authentication specification, allowing issuers to verify that… - [Setup](https://docs.walt.id/enterprise-stack/services/client-attestation-service/setup.md): This guide walks you through setting up a Client Attestation Service inside a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Wallet Integration](https://docs.walt.id/enterprise-stack/services/client-attestation-service/wallet-integration.md): This guide explains how to configure the Wallet Service to obtain and use client attestations when requesting credentials from issuers that require attestation-based client authentication. - [Issuer Integration](https://docs.walt.id/enterprise-stack/services/client-attestation-service/issuer-integration.md): This guide explains how to configure the Issuer2 Service to require attestation-based client authentication when issuing credentials. - [Full API Reference](https://docs.walt.id/enterprise-stack/services/client-attestation-service/full-api-reference.md): Find it here ## Enterprise Stack — Services — Oidc Bridge Service - [Overview](https://docs.walt.id/enterprise-stack/services/oidc-bridge-service/overview.md): The OIDC Bridge Service lets traditional Identity and Access Management (IAM) systems accept Verifiable Credential (VC) based login using standard OpenID Connect (OIDC). It acts as an OIDC Identity Provider (IdP): your… - [Setup](https://docs.walt.id/enterprise-stack/services/oidc-bridge-service/setup.md): This guide walks through creating, configuring, and verifying an OIDC Bridge service. We will set up the service inside a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Keycloak Integration](https://docs.walt.id/enterprise-stack/services/oidc-bridge-service/iam-integrations/keycloak.md): This guide demonstrates how to integrate the OIDC Bridge with Keycloak, enabling users to log in with Verifiable Credentials. - [Claim Mappings](https://docs.walt.id/enterprise-stack/services/oidc-bridge-service/claim-mappings.md): Claim mappings define how attributes from verifiable credentials are extracted and mapped to standard OIDC claims that IAM systems can consume. The OIDC Bridge uses JSONPath expressions to extract values from… - [Multi-Flow Configuration](https://docs.walt.id/enterprise-stack/services/oidc-bridge-service/multi-flow-config.md): The OIDC Bridge supports four different credential presentation methods, each optimized for different user scenarios. You can enable/disable flows individually, customize button labels, and configure flow-specific… ## Enterprise Stack — Services — Verifier Service - [Overview](https://docs.walt.id/enterprise-stack/services/verifier-service/overview.md): walt.id's Verifier Service enables organizations to verify digital identity credentials in a secure, privacy‑preserving and standards compliant way. Users can also use a management GUI for handling multiple verifier… - [Setup](https://docs.walt.id/enterprise-stack/services/verifier-service/setup.md): We will setup a Verifier service inside of a tenant. If you don't have a tenant yet, you can learn how to create one here. - [Verifying Verifiable Credentials via OID4VC](https://docs.walt.id/enterprise-stack/services/verifier-service/credential-verification/vc-oid4vc.md): Learn how to request and verify Verifiable Credentials (W3C) via OID4VP using the walt.id Enterprise verifier API. - [Verifying SD-JWT VC Credentials via OID4VC](https://docs.walt.id/enterprise-stack/services/verifier-service/credential-verification/sd-jwt-vc-oid4vc.md): Learn how to request and verify SD-JWT VC via OID4VP using the walt.id Enterprise Verifier API. - [Verify Mobile Driver's Licenses (ISO/IEC 18013-7 mDL)](https://docs.walt.id/enterprise-stack/services/verifier-service/credential-verification/mdl-oid4vc.md): Request and verify mDLs using the walt.id Enterprise Stack Verifier API. - [Overview](https://docs.walt.id/enterprise-stack/services/verifier-service/policies/overview.md): Static, parameterized and dynamic verification policies for verifiable credentials. - [Static Verification Policies](https://docs.walt.id/enterprise-stack/services/verifier-service/policies/static-verification-policies.md): Predefined and covering a variety of common use cases, enabling developers to verify credentials easily. - [Parameterized Verification Policies](https://docs.walt.id/enterprise-stack/services/verifier-service/policies/parameterized-verification-policies.md): Parameterized policies are a type of policy that requires certain parameters or arguments for their execution. - [Dynamic Verification Policies](https://docs.walt.id/enterprise-stack/services/verifier-service/policies/dynamic-verification-policies.md): Dynamic verification policies for verifiable credentials. - [Overview](https://docs.walt.id/enterprise-stack/services/verifier-service/configurations/overview.md): The verifier, similar to other services in the Enterprise Stack, maintains a collection of configurations. These configurations include internal configs such as the base URL, which are used solely within the Enterprise… - [OpenID Metadata](https://docs.walt.id/enterprise-stack/services/verifier-service/configurations/openid-metadata.md): Via the openid-metadata config, the verifier service can be configured to expose details such as verifier name and logo in a standardized way with other services such as digital wallets. These services can then use this… - [Full API Reference](https://docs.walt.id/enterprise-stack/services/verifier-service/full-api-reference.md): Find it here ## Enterprise Stack — Ecosystems - [How to Issue and Verify PIDs with the EUDI Wallet (eIDAS2)](https://docs.walt.id/enterprise-stack/ecosystems/eudi-demo.md): This comprehensive guide walks you through the complete process of issuing and verifying Person Identification Data (PID) credentials using the EU Digital Identity Reference Wallet (EUDI Wallet) under eIDAS2 with the… - [Mutlipaz Wallet](https://docs.walt.id/enterprise-stack/ecosystems/mutlipaz-wallet.md): Create IACA and DSC ## Enterprise Stack — Release Notes - [Overview](https://docs.walt.id/enterprise-stack/release-notes/overview.md): This section contains the release notes for the Enterprise Stack. - [0.18](https://docs.walt.id/enterprise-stack/release-notes/releases/0.18.x.md): - Added a auto-fix-enterprise-service-dependency feature flag, which will automatically fix service dependencies when a service is called and produce a WARN log. This is to improve backwards compatibility for the… - [0.19](https://docs.walt.id/enterprise-stack/release-notes/releases/0.19.x.md): Issuer2 and OpenID4VCI - [0.20](https://docs.walt.id/enterprise-stack/release-notes/releases/0.20.x.md): - Added authorizationdetails support for OpenID4VCI flows with custom attributes in repository, updated issuer service, and Keycloak integration tests. - Fixed custom sessionId handling in issuer2 credential-offer… - [0.21](https://docs.walt.id/enterprise-stack/release-notes/releases/0.21.x.md): Database Migration Framework - [0.22.x](https://docs.walt.id/enterprise-stack/release-notes/releases/0.22.x.md): - Delivered mobile wallet SDK enterprise alignment with enterprise-backed mobile tests, wallet SDK/demo app integration, conformance updates, Wallet2 API test refactors, and mobile SDK compatibility work (WAL-1033). -… - [0.23.x](https://docs.walt.id/enterprise-stack/release-notes/releases/0.23.x.md): - Delivered ETSI Trust Lists / LoTL enterprise integration: standards-based trust-list sources, source assurance policies, LoTL support, and Trust Registry API/UI/test alignment. - Brought OpenID4VCI client… - [Archive Release Notes](https://docs.walt.id/enterprise-stack/release-notes/releases.md): This contains an archive of older release notes for versions that are no longer supported. - [Pre Releases](https://docs.walt.id/enterprise-stack/release-notes/pre-releases.md): Every so often, we release pre-releases of the Enterprise Stack. These are not yet stable releases, but they are a good way to get a feel for the new features and improvements. This page will maintain a list of the…