Issuance, programmable
Five issuer archetypes Credential Issuer is built to serve — from member-state PID to employer onboarding.
Five issuer archetypes. Each is a concrete credential template + issuance flow that an authority, bank, university, chamber, or employer has asked for.
Customer: A national identity authority operating under eIDAS 2.0.
Asked: Mint qualified PID credentials at national scale, with status-list revocation and ARF-aligned signing.
Shape: Template: PIDCredential. Signing via qualified signing key (Vault Transit roadmap). Trust-registry publication of issuer JWKS. Multi-regional Postgres replicas.
Customer: A retail bank wanting customers to present 'verified customer of us' credentials at partner services.
Asked: Mint credentials when the user logs into online banking; revoke instantly when the customer closes the account.
Shape: Template: VerifiedCustomerCredential. Auth-code flow (roadmap) lets the user explicitly consent before issuance. Status-list update on account closure.
Customer: A university issuing verifiable diplomas to graduates.
Asked: Each graduate receives a diploma credential they hold for life. Employers verify via any ARF-conformant verifier.
Shape: Template: DiplomaCredential with JSON schema for programme, degree, GPA. Batch issuance on graduation; no status-list unless degrees are retroactively rescinded.
Customer: A KvK-style registry issuing 'verified business' credentials to member businesses.
Asked: Members can prove business status + authorised representative status across multiple services without re-verification.
Shape: Multi-tenant: each chamber operates its own issuer, shared deployment. Templates per credential type (business registration, power-of-attorney, sector licences).
Customer: A large employer issuing employment credentials to new hires.
Asked: Day-one issuance: employee's wallet receives employment + start date + role credentials. Usable at landlords, benefits providers, and other partners.
Shape: Triggered from the HR portal via API. Received into Cloud Wallet (browser) or Native Wallet SDK (employer's mobile app). Revoked on termination.
Request access to mint SD-JWT VC credentials with templates, revocation, and multi-tenant isolation.