CODEWITHSUNDEEP
azure-ad-verifiable-credentials
Nishant Agrawal
Nishant Agrawal

Reputation: 13

How to get DID of Subject who has been issues VC

  1. I understand that the Authenticator App / wallet creates DID for user. How can Issuer App access this DID, when issuing VC to that user?

  2. I also understood that MS Authenticator App is also the Identify Hub, and stores the issued credential. Is this understanding correct?

  3. When we search in indexable attribute in Azure ("Find the credential to revoke"), and get a Credential ID in response, of format: urn:pic:ef720xxxxxxxxxbxxxxed, is this the DID of the issued credential; guess not? Is there any reference of VC on ION / BTC chain? If yes, how the issuer / verifier app access DID of the Credential?

Thank you!

Upvotes: 1

Views: 47

Answers (1)

Daniel Krzyczkowski
Daniel Krzyczkowski

Reputation: 3157

Here are the answers that should help.

1.Issuer app does not have to access DID of the user. It is handled by Microsoft Entra Verified ID infrastructure and Microsoft Authenticator app. Each wallet (Authenticator app) has its own DID. When credential is issued to the user, there id DID of the issuer included and DID of the user (from the wallet/Authenticator app).

2.Microsoft Authenticator is a wallet and not an Identity Hub. There is actually an Identity Hub present for each Verified ID authority and you can see that in the DID document, under .well-known/did.json document. Currently it is only for internal Microsoft use. Here id the DID.json document structure:

https://learn.microsoft.com/en-us/entra/verified-id/admin-api#response-message-5

You can see internal Identity Hub under #hub property.

3.urn:pic:ef720xxxxxxxxxbxxxxed is not the DID of the issued credentials. It is internal URN (Uniform Resource Name) used to identify the credential. ION support was removed and now the only method is DID:WEB. DID can be accessed using "did.json" file. More details here:

https://learn.microsoft.com/en-us/entra/verified-id/whats-new#december-2023 https://learn.microsoft.com/en-us/entra/verified-id/verifiable-credentials-faq#how-do-i-move-to-didweb-from-didion

Upvotes: 0

Related Questions