OpenID4VCI is an OpenID protocol for issuing verifiable credentials to holders. It lets suppliers issue employment and delegated-authority credentials that employees later present when accessing shared business records. section 16.8.1 section 16.7
OpenID4VCI covers issuance, while OpenID4VP covers presentation. Together they reuse OAuth and OpenID Connect conventions for transport, discovery, and authentication, while verifiers still check issuer trust, expiration, and revocation. section 16.7
Supplier access without lingering accounts
When a supplier employee signs in, the policy enforcement point requests claims about employment and delegated authority. After verifying the presented credential, it sends normalized attributes to the policy decision point. Access to a purchase order requires employment with the listed supplier, delegation for the relevant contract, and a delegation credential that remains valid. section 16.8.1
