OpenID4VC is a family of OpenID specifications for issuing and presenting verifiable credentials through familiar web identity infrastructure. OpenID4VCI handles issuance, while OpenID4VP handles presentation. section 16.7
An OpenID4VC authorization flow typically connects:
- A policy enforcement point (PEP) requests required attributes. section 16.7
- A holder assembles and presents credentials through an OpenID4VP flow. section 16.7
- The PEP verifies issuer trust, expiration, and revocation before passing normalized claims to the policy decision point (PDP). section 16.7
Interoperable authorization
A verifier can accept presentations delivered through different protocols while applying the same authorization checks: trusted issuers, expiration, revocation, and normalized attributes. The PDP evaluates attributes rather than the protocol used to issue or present the credential. section 16.7
