Overview
Verifier2 Service enables organizations to verify digital identity credentials. It sends a presentation request to a holder's wallet, receives the signed credential presentation in response, and validates it against configurable policies. Credential exchange runs over OID4VP v1.0, with additional support for the Digital Credentials API and ISO/IEC 18013-7. Supported credential formats include W3C VC, SD-JWT VC (IETF), ISO 18013-5 mDL, and ISO 23220 PhotoID.
The original verifier service, which supports Draft 14 and Draft 20 of the OID4VP specification, is deprecated and will be removed in Q2 2026. If you require documentation for it, please see the Verifier Service documentation. If possible, please use the verifier2 service instead.
Supported Standards
| Credential Formats: | SD-JWT VC (IETF), W3C VC (v1.1+, v2.0), ISO 18013-5 mDL, ISO 23220 PhotoID |
| Credential Exchange: | OID4VP (Version 1.0), ISO/IEC 18013-7, Digital Credentials API |
| Signature Algorithms: | ed25519, secp256k1, secp256r1, RSA |
Features
- Credential Verification - Request and verify various digital credential types and formats (W3C, SD-JWT, mDL) via OID4VP V1.
- Policies - Apply built-in or custom policies to control validation checks such as expiry, schema conformance, and trust anchor verification.
- Callbacks & SSE - Get notified when a verification session completes via a webhook callback or a Server-Sent Events (SSE) stream, including the session status, policy results, and presented credentials.
- Session data retention & auto-purge - Presentation sessions can contain PII (holder identifiers, disclosed attributes, device metadata). The Enterprise Stack can automatically delete expired verifier sessions so you do not have to script manual cleanup. Configure retention windows, purge cadence, dry-run mode, and deletion limits via the Enterprise Stack → Setup → Data Retention file by setting options such as
maxVerifierSessionAgeandschedule.
Getting Started
- Setup – Configure a verifier service (set default signing keys, certificate chains, and URL hosts during initial setup to simplify future verification sessions)
- Verify W3C credentials – Walkthrough on how to verify a W3C credential
- Verify SD-JWT VC credentials – Walkthrough on how to verify an SD-JWT VC credential
- Verify mDL/mDOC credentials – Walkthrough on how to verify an mDL/mDOC credential
- Verify credentials via Digital Credentials API – Walkthrough on how to verify credentials using the DC API
