credential_identifier or credential_configuration_id, not both

OID4VCI 1.0 §8.2MUSTRoles: wallet

Requirement as recorded in the ProtocolSoup registry

credential_identifier is REQUIRED when the Token Response returned openid_credential authorization_details with credential_identifiers and MUST NOT be used otherwise; when used, credential_configuration_id MUST NOT be present. credential_configuration_id is REQUIRED when credential_identifiers were not returned and MUST NOT be used otherwise.

Read §8.2 in OID4VCI 1.0

Self-test verdict

PassCommit 97df6a8Evaluated 2026-10-11

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Tests

TestCredentialRequestBuilderIdentifierExclusivity
./cmd/walletharness
Pass

Implementation

backend/cmd/walletharness/oid4vci_client.go

Related requirements

Also in §8.2

CI-017Batch credential issuance bound to distinct proof keys CW-072Credential Response encryption and decryption as JWTs

All OID4VCI 1.0 requirements · OID4VCI protocol page