🍜Protocol Soup

OID4VCI Deferred Credential Issuance

Full pre-authorized code flow where the credential endpoint returns a transaction_id for deferred issuance — wallet polls the deferred_credential endpoint until the credential is ready (OID4VCI §9).

Try in Looking Glass
Verifiable CredentialsDeferred Polling

Sequence Diagram

Click any step for details

WalletIssuerAuth Server1Resolve Credential Offer2Discover Issuer Metadata3Token Request (Pre-Authorized Code)4Token Response5Credential Request6Deferred Credential Response7Poll Deferred Endpoint8Credential Ready
Request
Response
Redirect
Internal

Step-by-Step Breakdown

1
Resolve Credential Offer
Wallet → Credential Issuer
2
Discover Issuer Metadata
Wallet → Credential Issuer
3
Token Request (Pre-Authorized Code)
Wallet → Authorization Server
4
Token Response
Authorization Server → Wallet
5
Credential Request
Wallet → Credential Issuer
6
Deferred Credential Response
Credential Issuer → Wallet
7
Poll Deferred Endpoint
Wallet → Credential Issuer
8
Credential Ready
Credential Issuer → Wallet

Token Inspector

Specs for this flow

Sections of the protocol that normatively define this flow, plus the security considerations that apply to it.

Core specs

· The specifications that define this protocol.

Security & privacy

· Dedicated security and privacy considerations.
BackLooking Glass