7.7. Credential Services

This is version 1.2.1 of this interface.

Get the OpenAPI file: cms.yaml

7.7.1. Services

7.7.1.1. Credential Request

POST /v1/credentialRequests/{credentialRequestId}

Create a request for a credential

Scope required: cms.request.write

Parameters:
  • credentialRequestId (string) – the id of the credential request. Object of type string.

Query Parameters:
  • transactionId (string) – The id of the transaction. Object of type string. (Required)

Form Parameters:
Status Codes:

Example request:

POST /v1/credentialRequests/string?transactionId=string HTTP/1.1
Host: example.com
Content-Type: application/json

{
    "status": "PENDING",
    "requestData": {
        "priority": 1,
        "credentialProfileId": "ABC",
        "requestType": "FIRST_ISSUANCE",
        "validFromDate": "2020-10-08T18:38:56Z",
        "validToDate": "2025-10-08T18:38:56Z",
        "issuingAuthority": "OSIA",
        "deliveryAddress": {
            "address1": "11 Rue des Rosiers",
            "city": "Libourne",
            "postalCode": "33500",
            "country": "France"
        }
    },
    "personId": "string",
    "biographicData": {
        "firstName": "John",
        "lastName": "Doo",
        "dateOfBirth": "1985-11-30",
        "gender": "M",
        "nationality": "FRA",
        "...": "..."
    },
    "biometricData": [
        {
            "biometricType": "FINGER",
            "biometricSubType": "RIGHT_INDEX",
            "instance": "string",
            "encounterId": "string",
            "image": "c3RyaW5n",
            "imageRef": "http://imageserver.com/image?id=00003",
            "captureDate": "2019-05-21T12:00:00Z",
            "captureDevice": "string",
            "impressionType": "LIVE_SCAN_PLAIN",
            "width": 1,
            "height": 1,
            "bitdepth": 1,
            "mimeType": "string",
            "resolution": 1,
            "compression": "WSQ",
            "missing": [
                {
                    "biometricSubType": "RIGHT_INDEX",
                    "presence": "BANDAGED"
                }
            ],
            "metadata": "string",
            "comment": "string",
            "template": "c3RyaW5n",
            "templateRef": "http://dataserver.com/template?id=00014",
            "templateFormat": "string",
            "quality": 1,
            "qualityFormat": "string",
            "algorithm": "string",
            "vendor": "string"
        }
    ]
}

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}
GET /v1/credentialRequests/{credentialRequestId}

Read a credential request

Scope required: cms.request.read

Parameters:
  • credentialRequestId (string) – the id of the credential request. Object of type string.

Query Parameters:
  • attributes (array) – The (optional) set of attributes to retrieve. Array of string.

  • transactionId (string) – The id of the transaction. Object of type string. (Required)

Status Codes:

Example request:

GET /v1/credentialRequests/string?attributes=%5B%27string%27%5D&transactionId=string HTTP/1.1
Host: example.com

Example response:

HTTP/1.1 200 OK
Content-Type: application/json

{
    "credentialRequestId": "string",
    "status": "PENDING",
    "requestData": {
        "priority": 1,
        "credentialProfileId": "ABC",
        "requestType": "FIRST_ISSUANCE",
        "validFromDate": "2020-10-08T18:38:56Z",
        "validToDate": "2025-10-08T18:38:56Z",
        "issuingAuthority": "OSIA",
        "deliveryAddress": {
            "address1": "11 Rue des Rosiers",
            "city": "Libourne",
            "postalCode": "33500",
            "country": "France"
        }
    },
    "personId": "string",
    "biographicData": {
        "firstName": "John",
        "lastName": "Doo",
        "dateOfBirth": "1985-11-30",
        "gender": "M",
        "nationality": "FRA",
        "...": "..."
    },
    "biometricData": [
        {
            "biometricType": "FINGER",
            "biometricSubType": "RIGHT_INDEX",
            "instance": "string",
            "encounterId": "string",
            "image": "c3RyaW5n",
            "imageRef": "http://imageserver.com/image?id=00003",
            "captureDate": "2019-05-21T12:00:00Z",
            "captureDevice": "string",
            "impressionType": "LIVE_SCAN_PLAIN",
            "width": 1,
            "height": 1,
            "bitdepth": 1,
            "mimeType": "string",
            "resolution": 1,
            "compression": "WSQ",
            "missing": [
                {
                    "biometricSubType": "RIGHT_INDEX",
                    "presence": "BANDAGED"
                }
            ],
            "metadata": "string",
            "comment": "string",
            "template": "c3RyaW5n",
            "templateRef": "http://dataserver.com/template?id=00014",
            "templateFormat": "string",
            "quality": 1,
            "qualityFormat": "string",
            "algorithm": "string",
            "vendor": "string"
        }
    ],
    "credentialIds": [
        "string"
    ]
}

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}
PUT /v1/credentialRequests/{credentialRequestId}

Update a credential request

Scope required: cms.request.write

Parameters:
  • credentialRequestId (string) – the id of the credential request. Object of type string.

Query Parameters:
  • transactionId (string) – The id of the transaction. Object of type string. (Required)

Form Parameters:
Status Codes:

Example request:

PUT /v1/credentialRequests/string?transactionId=string HTTP/1.1
Host: example.com
Content-Type: application/json

{
    "status": "PENDING",
    "requestData": {
        "priority": 1,
        "credentialProfileId": "ABC",
        "requestType": "FIRST_ISSUANCE",
        "validFromDate": "2020-10-08T18:38:56Z",
        "validToDate": "2025-10-08T18:38:56Z",
        "issuingAuthority": "OSIA",
        "deliveryAddress": {
            "address1": "11 Rue des Rosiers",
            "city": "Libourne",
            "postalCode": "33500",
            "country": "France"
        }
    },
    "personId": "string",
    "biographicData": {
        "firstName": "John",
        "lastName": "Doo",
        "dateOfBirth": "1985-11-30",
        "gender": "M",
        "nationality": "FRA",
        "...": "..."
    },
    "biometricData": [
        {
            "biometricType": "FINGER",
            "biometricSubType": "RIGHT_INDEX",
            "instance": "string",
            "encounterId": "string",
            "image": "c3RyaW5n",
            "imageRef": "http://imageserver.com/image?id=00003",
            "captureDate": "2019-05-21T12:00:00Z",
            "captureDevice": "string",
            "impressionType": "LIVE_SCAN_PLAIN",
            "width": 1,
            "height": 1,
            "bitdepth": 1,
            "mimeType": "string",
            "resolution": 1,
            "compression": "WSQ",
            "missing": [
                {
                    "biometricSubType": "RIGHT_INDEX",
                    "presence": "BANDAGED"
                }
            ],
            "metadata": "string",
            "comment": "string",
            "template": "c3RyaW5n",
            "templateRef": "http://dataserver.com/template?id=00014",
            "templateFormat": "string",
            "quality": 1,
            "qualityFormat": "string",
            "algorithm": "string",
            "vendor": "string"
        }
    ]
}

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}
POST /v1/credentialRequests/{credentialRequestId}/cancel

Cancel a credential request

Scope required: cms.request.write

Parameters:
  • credentialRequestId (string) – the id of the credential request. Object of type string.

Query Parameters:
  • transactionId (string) – The id of the transaction. Object of type string. (Required)

Status Codes:

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

7.7.1.2. Credential

POST /v1/credentials

Retrieve a list of credentials that match the given search criteria

Scope required: cms.credential.read

Query Parameters:
  • attributes (array) – The (optional) set of required attributes to retrieve. Array of string.

  • transactionId (string) – The id of the transaction. Object of type string. (Required)

Form Parameters:
Status Codes:

Example request:

POST /v1/credentials?attributes=%5B%27string%27%5D&transactionId=string HTTP/1.1
Host: example.com
Content-Type: application/json

[
    {
        "attributeName": "string",
        "operator": "<",
        "value": "string"
    }
]

Example response:

HTTP/1.1 200 OK
Content-Type: application/json

[
    {
        "credentialId": "string",
        "status": "NEW",
        "statusOther": "string",
        "credentialNumber": "string",
        "personId": "string",
        "credentialProfileId": "string",
        "issuedDate": "2024-10-30T17:16:21.316059",
        "expiryDate": "2024-10-30T17:16:21.316059",
        "serialNumber": "string",
        "issuingAuthority": "string",
        "issuingPlace": "string",
        "others": {
            "...": "..."
        }
    }
]

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}
GET /v1/credentials/{credentialId}

Read a credential

Scope required: cms.credential.read

Parameters:
  • credentialId (string) – the id of the credential. Object of type string.

Query Parameters:
  • attributes (array) – The (optional) set of required attributes to retrieve. Array of string.

  • transactionId (string) – The id of the transaction. Object of type string. (Required)

Status Codes:

Example request:

GET /v1/credentials/string?attributes=%5B%27string%27%5D&transactionId=string HTTP/1.1
Host: example.com

Example response:

HTTP/1.1 200 OK
Content-Type: application/json

{
    "credentialId": "string",
    "status": "NEW",
    "statusOther": "string",
    "credentialNumber": "string",
    "personId": "string",
    "credentialProfileId": "string",
    "issuedDate": "2024-10-30T17:16:21.316059",
    "expiryDate": "2024-10-30T17:16:21.316059",
    "serialNumber": "string",
    "issuingAuthority": "string",
    "issuingPlace": "string",
    "others": {
        "...": "..."
    }
}

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}
POST /v1/credentials/{credentialId}/suspend

Suspend a credential

Scope required: cms.credential.write

Parameters:
  • credentialId (string) – the id of the credential. Object of type string.

Query Parameters:
  • transactionId (string) – The id of the transaction. Object of type string. (Required)

JSON Parameters:
  • reason (string) – the reason for suspension

Status Codes:

Example request:

POST /v1/credentials/string/suspend?transactionId=string HTTP/1.1
Host: example.com
Content-Type: application/json

{
    "reason": "string"
}

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}
POST /v1/credentials/{credentialId}/unsuspend

Unsuspend a credential

Scope required: cms.credential.write

Parameters:
  • credentialId (string) – the id of the credential. Object of type string.

Query Parameters:
  • transactionId (string) – The id of the transaction. Object of type string. (Required)

JSON Parameters:
  • reason (string) – the reason for unsuspension

Status Codes:

Example request:

POST /v1/credentials/string/unsuspend?transactionId=string HTTP/1.1
Host: example.com
Content-Type: application/json

{
    "reason": "string"
}

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}
POST /v1/credentials/{credentialId}/revoke

Revoke a credential

Scope required: cms.credential.write

Parameters:
  • credentialId (string) – the id of the credential. Object of type string.

Query Parameters:
  • transactionId (string) – The id of the transaction. Object of type string. (Required)

JSON Parameters:
  • reason (string) – the reason for revocation

Status Codes:

Example request:

POST /v1/credentials/string/revoke?transactionId=string HTTP/1.1
Host: example.com
Content-Type: application/json

{
    "reason": "string"
}

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}
POST /v1/credentials/{credentialId}/status

Change the status of a credential

Scope required: cms.credential.write

Parameters:
  • credentialId (string) – the id of the credential. Object of type string.

Query Parameters:
  • transactionId (string) – The id of the transaction. Object of type string. (Required)

JSON Parameters:
  • status (string) – The new status of the credential

  • reason (string) – The reason for the change of status

  • requester (string) – The ID/name of the entity requesting the change

  • comment (string) – A free comment

Status Codes:

Example request:

POST /v1/credentials/string/status?transactionId=string HTTP/1.1
Host: example.com
Content-Type: application/json

{
    "status": "string",
    "reason": "string",
    "requester": "string",
    "comment": "string"
}

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

7.7.1.3. Credential Profile

POST /v1/credentialProfiles

Retrieve a list of credential profiles that match the given search criteria

Scope required: cms.profile.read

Query Parameters:
  • attributes (array) – The (optional) set of required attributes to retrieve. Array of string.

  • transactionId (string) – The id of the transaction. Object of type string. (Required)

Form Parameters:
Status Codes:

Example request:

POST /v1/credentialProfiles?attributes=%5B%27string%27%5D&transactionId=string HTTP/1.1
Host: example.com
Content-Type: application/json

[
    {
        "attributeName": "string",
        "operator": "<",
        "value": "string"
    }
]

Example response:

HTTP/1.1 200 OK
Content-Type: application/json

[
    {
        "credentialProfileId": "string",
        "name": "string",
        "description": "string",
        "credentialType": "SMARTCARD",
        "defaultLifetime": 1
    }
]

Example response:

HTTP/1.1 400 Bad Request
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

Example response:

HTTP/1.1 500 Internal Server Error
Content-Type: application/json

{
    "code": 1,
    "message": "string"
}

7.7.2. Data Model

7.7.2.1. Error

Table 7.42 Error

Attribute

Type

Description

Required

code

integer/int32

Error code.

Yes

message

string

Error message.

Yes

7.7.2.2. Address

Table 7.43 Address

Attribute

Type

Description

Required

address1

string

the first line of the address.

address2

string

the second line of the address.

city

string

the city of the address.

state

string

the state of the address.

postalCode

string

the postal code of the address.

country

string

the country of the address.

others.*

Additional properties

Example #1:

{
  "address1": "11 Rue des Rosiers",
  "address2": "1st floor",
  "city": "Libourne",
  "state": "Gironde",
  "postalCode": "33500",
  "country": "France"
}

7.7.2.3. BiographicData

The set of biographic data.

Table 7.44 BiographicData

Attribute

Type

Description

Required

*

Additional properties

Example #1:

{
  "firstName": "John",
  "lastName": "Doo",
  "dateOfBirth": "1985-11-30",
  "gender": "M",
  "nationality": "FRA"
}

7.7.2.4. BiometricData

Table 7.45 BiometricData

Attribute

Type

Description

Required

biometricType

string

Constraints: possible values are FACE, FINGER, IRIS, SIGNATURE, UNKNOWN

Yes

biometricSubType

string

Constraints: possible values are UNKNOWN, RIGHT_THUMB, RIGHT_INDEX, RIGHT_MIDDLE, RIGHT_RING, RIGHT_LITTLE, LEFT_THUMB, LEFT_INDEX, LEFT_MIDDLE, LEFT_RING, LEFT_LITTLE, PLAIN_RIGHT_FOUR_FINGERS, PLAIN_LEFT_FOUR_FINGERS, PLAIN_THUMBS, UNKNOWN_PALM, RIGHT_FULL_PALM, RIGHT_WRITERS_PALM, LEFT_FULL_PALM, LEFT_WRITERS_PALM, RIGHT_LOWER_PALM, RIGHT_UPPER_PALM, LEFT_LOWER_PALM, LEFT_UPPER_PALM, RIGHT_OTHER, LEFT_OTHER, RIGHT_INTERDIGITAL, RIGHT_THENAR, RIGHT_HYPOTHENAR, LEFT_INTERDIGITAL, LEFT_THENAR, LEFT_HYPOTHENAR, RIGHT_INDEX_AND_MIDDLE, RIGHT_MIDDLE_AND_RING, RIGHT_RING_AND_LITTLE, LEFT_INDEX_AND_MIDDLE, LEFT_MIDDLE_AND_RING, LEFT_RING_AND_LITTLE, RIGHT_INDEX_AND_LEFT_INDEX, RIGHT_INDEX_AND_MIDDLE_AND_RING, RIGHT_MIDDLE_AND_RING_AND_LITTLE, LEFT_INDEX_AND_MIDDLE_AND_RING, LEFT_MIDDLE_AND_RING_AND_LITTLE, EYE_UNDEF, EYE_RIGHT, EYE_LEFT, EYE_BOTH, PORTRAIT, LEFT_PROFILE, RIGHT_PROFILE

instance

string

Used to separate two distincts biometric items of the same type and subtype.

encounterId

string

the id of the encounter owner of this biometric.

image

string/byte

Base64-encoded image.

imageRef

string/uri

URI to an image.

captureDate

string/date-time

captureDevice

string

A string identifying the device used to capture the biometric.

impressionType

string

Constraints: possible values are LIVE_SCAN_PLAIN, LIVE_SCAN_ROLLED, NONLIVE_SCAN_PLAIN, NONLIVE_SCAN_ROLLED, LATENT_IMPRESSION, LATENT_TRACING, LATENT_PHOTO, LATENT_LIFT, LIVE_SCAN_SWIPE, LIVE_SCAN_VERTICAL_ROLL, LIVE_SCAN_PALM, NONLIVE_SCAN_PALM, LATENT_PALM_IMPRESSION, LATENT_PALM_TRACING, LATENT_PALM_PHOTO, LATENT_PALM_LIFT, LIVE_SCAN_OPTICAL_CONTACTLESS_PLAIN, OTHER, UNKNOWN

width

integer

the width of the image.

height

integer

the height of the image.

bitdepth

integer

mimeType

string

the nature and format of the image. The mime type definitions should be in compliance with RFC 6838.

resolution

integer

the image resolution (in DPI).

compression

string

Constraints: possible values are NONE, WSQ, JPEG, JPEG2000, PNG

missing

Array of MissingType

Optional properties indicating if a part of the biometric data is missing.

metadata

string

An optional string used to convey information vendor-specific.

comment

string

A comment about the biometric data.

template

string/byte

Base64-encoded template.

templateRef

string/uri

URI to the template when it is managed in a dedicated data server.

templateFormat

string

Format of the template. One of ISO_19794_2, ISO_19794_2_NS, ISO_19794_2_CS, ISO_19794_2_2011, ANSI_378_2009 or ANSI_378. Can be extended to include additional proprietary template format

quality

integer/int64

Quality, as a number, of the biometric.

qualityFormat

string

Format of the quality. One of ISO_19794, NFIQ, or NFIQ2. Can be extended to include additional proprietary quality format

algorithm

string

vendor

string

7.7.2.5. MissingType

Table 7.46 MissingType

Attribute

Type

Description

Required

biometricSubType

string

Constraints: possible values are UNKNOWN, RIGHT_THUMB, RIGHT_INDEX, RIGHT_MIDDLE, RIGHT_RING, RIGHT_LITTLE, LEFT_THUMB, LEFT_INDEX, LEFT_MIDDLE, LEFT_RING, LEFT_LITTLE, PLAIN_RIGHT_FOUR_FINGERS, PLAIN_LEFT_FOUR_FINGERS, PLAIN_THUMBS, UNKNOWN_PALM, RIGHT_FULL_PALM, RIGHT_WRITERS_PALM, LEFT_FULL_PALM, LEFT_WRITERS_PALM, RIGHT_LOWER_PALM, RIGHT_UPPER_PALM, LEFT_LOWER_PALM, LEFT_UPPER_PALM, RIGHT_OTHER, LEFT_OTHER, RIGHT_INTERDIGITAL, RIGHT_THENAR, RIGHT_HYPOTHENAR, LEFT_INTERDIGITAL, LEFT_THENAR, LEFT_HYPOTHENAR, RIGHT_INDEX_AND_MIDDLE, RIGHT_MIDDLE_AND_RING, RIGHT_RING_AND_LITTLE, LEFT_INDEX_AND_MIDDLE, LEFT_MIDDLE_AND_RING, LEFT_RING_AND_LITTLE, RIGHT_INDEX_AND_LEFT_INDEX, RIGHT_INDEX_AND_MIDDLE_AND_RING, RIGHT_MIDDLE_AND_RING_AND_LITTLE, LEFT_INDEX_AND_MIDDLE_AND_RING, LEFT_MIDDLE_AND_RING_AND_LITTLE, EYE_UNDEF, EYE_RIGHT, EYE_LEFT, EYE_BOTH, PORTRAIT, LEFT_PROFILE, RIGHT_PROFILE

presence

string

Constraints: possible values are BANDAGED, AMPUTATED, DAMAGED

7.7.2.6. RequestData

The data describing the request itself

Table 7.47 RequestData

Attribute

Type

Description

Required

priority

integer

the request priority (0: lowest priority; 9: highest priority).

Yes

credentialProfileId

string

The id of the credential profile to request.

Yes

requestType

string

The type of request, e.g. first issuance, renewal, etc. Constraints: possible values are FIRST_ISSUANCE, RENEWAL, REPLACEMENT, OTHER

Yes

requestTypeOther

string

Details about the request type when OTHER is selected.

validFromDate

string/date-time

May be used to override the default start date of the requested credential. This must only be later than the current date, not earlier.

validToDate

string/date-time

May be used to override the default expiry date of the requested credential. This must only be earlier than the default expiry, not later.

credentialNumber

string

Number to be used for the new credentials created. It can be used for example when requesting a digital credential sharing the same number with a physical credential, or when the number is not created by the issuance system.

issuingAuthority

string

deliveryOffice

string

Single code or name identifying the office where the credential has to be delivered.

deliveryAddress

Object of type Address

parentCredentialId

string

The ID credential used as a reference, or parent, to build a new one.

others.*

Additional properties

Example #1:

{
  "priority": 1,
  "credentialProfileId": "ABC",
  "requestType": "FIRST_ISSUANCE",
  "validFromDate": "2020-10-08T18:38:56Z",
  "validToDate": "2025-10-08T18:38:56Z",
  "issuingAuthority": "OSIA",
  "deliveryAddress": {
    "address1": "11 Rue des Rosiers",
    "city": "Libourne",
    "postalCode": "33500",
    "country": "France"
  }
}

7.7.2.7. CredentialRequest

A request for a credential

Table 7.48 CredentialRequest

Attribute

Type

Description

Required

credentialRequestId

string

The unique id of this credential request. Constraints: read only

status

string

Constraints: possible values are PENDING, ISSUED, CANCELLED, FAILED

requestData

Object of type RequestData

The data describing the request itself.

Yes

personId

string

The id of the person who is the target of the request.

Yes

biographicData

Object of type BiographicData

The set of biographic data.

Yes

biometricData

Array of BiometricData

credentialIds

Array of string

The id of the credentials created for this request. The unique id of the credential. Constraints: read only

7.7.2.8. CredentialData

A credential

Table 7.49 CredentialData

Attribute

Type

Description

Required

credentialId

string

The unique id for this credential. Constraints: read only

Yes

status

string

The status of the credential. Constraints: possible values are NEW, ACTIVE, SUSPENDED, REVOKED, OTHER; read only

Yes

statusOther

string

Details about the status when OTHER is used. Constraints: read only

credentialNumber

string

The number attached to the credential (ex: passport number).

personId

string

The unique id of the person that the credential request is for.

Yes

credentialProfileId

string

The unique id of the credential profile.

Yes

issuedDate

string/date-time

The date and time that this credential was issued.

expiryDate

string/date-time

The date and time that this credential expires.

serialNumber

string

the serial number of the credential.

issuingAuthority

string

The authority issuing the credential (ex: the Ministry of Interior).

issuingPlace

string

The place where the credential was issued (ex: Paris).

others.*

Additional properties

7.7.2.9. CredentialProfile

A credential profile

Table 7.50 CredentialProfile

Attribute

Type

Description

Required

credentialProfileId

string

The unique id for this credential profile.

name

string

The name of the credential profile.

description

string

The description of the credential profile.

credentialType

string

The type of credential that this profile will issue. Constraints: possible values are SMARTCARD, VIRTUAL_SMARTCARD, MOBILE, PASSPORT, ID_CARD

defaultLifetime

integer

The default number of days that this credential will be considered valid for after issuance.

7.7.2.10. Expression

Table 7.51 Expression

Attribute

Type

Description

Required

attributeName

string

Yes

operator

string

Constraints: possible values are <, >, =, >=, <=, !=

Yes

value

One of string, integer, number, boolean

Yes

7.7.2.11. Expressions

Table 7.52 Expressions

Attribute

Type

Description

Required

N/A

Array of Expression