Available Flows
Specs & references
Authoritative reading list for OpenID4VCI — core specs, security considerations, and companion standards.
Core specs
· The specifications that define this protocol.Security & privacy
· Dedicated security and privacy considerations.Companion specs
· Extensions, hardenings, and supporting RFCs.- IETF SD-JWT (Selective Disclosure for JWTs)
- IETF SD-JWT VC (SD-JWT-based Verifiable Credentials)
- W3C Verifiable Credentials Data Model 2.0
- ISO/IEC 18013-5 — Mobile Driving Licence (mDL)
- RFC 7800 — Proof-of-Possession Key Semantics for JWTs
cnf claim used for credential key binding.
- RFC 7636 — Proof Key for Code Exchange (PKCE)
Deployment profiles
· Profiles that constrain the protocol for specific assurance regimes.Normative requirements
Every MUST, SHOULD and MAY OpenID4VCI exercises, with the section it comes from and ProtocolSoup's self-test verdict for this build.
- OID4VCI 1.029 requirements
OpenID for Verifiable Credential Issuance · 1.0 Final
- HAIP 1.08 requirements
OpenID4VC High Assurance Interoperability Profile · 1.0 Final
- RFC 944912 requirements
OAuth 2.0 Demonstrating Proof of Possession · RFC 9449
- RFC 99016 requirements
Selective Disclosure for JSON Web Tokens · RFC 9901
- ISO/IEC 18013-56 requirements
Personal identification — ISO-compliant driving licence — Part 5 · ISO/IEC 18013-5
OpenID4VCI Features
Credential Offer (by value/reference)
Credential Offer (by value/reference)
Pre-Authorized Code Grant
Pre-Authorized Code Grant
tx_code Enforcement
tx_code Enforcement