liveBook · Manning

Decentralized identifier

As explained in Authorization in Action

A DID-based identifier is an identifier derived from a decentralized identifier used to identify a credential subject or related party.

A decentralized identifier (DID)-based identifier identifies a credential subject or related party through a decentralized identifier. In verifiable-credential authorization, issuers use DIDs to sign credentials, while verifiers resolve DIDs to locate issuer keys and validate presentations. section 16.7

Credential verification flow

A holder presents a signed credential through a supported protocol. The verifier resolves the issuer’s DID, checks the signature and trust status, then passes normalized attributes to the policy decision point for authorization. section 16.7

How Authorization in Action covers it

How deep it goes
Defines use in signed credentials and DID resolution, but defers deeper treatment of identifier mechanics.
Examples
Uses W3C Verifiable Credentials Data Model and OpenID4VC issuance and presentation protocols as deployment families.
What you can do after
Evaluate/understand how verifiers resolve issuer keys and validate signed presentations before policy evaluation.
How it connects
Connects verifiable credentials, wallets, signed presentations, issuer keys, DID resolution, and policy decision points.
Cover of Authorization in Action
liveBookmanning.com
Read Authorization in Action on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Authorization in Action. The section links point to the parts of the book it draws on.