BREAKING: OpenID4VCI Just Got Even Better! Here’s What’s New in the Latest Update
OpenID4VCI's latest update enhances clarity, security, and interoperability for verifiable credential issuance, with refined binding rules and improved claims path processing.
Published on: 6/12/2025, 5:37:19 PM
OpenID4VCIVerifiableCredentialsOAuth2IdentitySecurityDecentralizedIdentityISOmdocsW3CVCsSDJWT
Key differences:
- Publication Date Update: The standard's publication date has been updated from 10 June 2025 to 12 June 2025.
- Credential Binding Clarification: The
credentialsarray now explicitly matches the number of keys provided by the Wallet, ensuring tighter binding between credentials and proofs. - OpenID Federation Draft Update: References updated from draft -42 to draft -43, reflecting the latest version of the OpenID Federation specification.
- Claims Path Pointer Enhancements: Improved clarity and alignment between JSON-based credentials and ISO mdocs for claims path pointers, including better error handling and processing rules.
- Negative Integer Handling: Explicitly states that negative integers are not used for JSON-based credentials, reducing ambiguity.
- ISO mdoc Path Processing: Enhanced rules for processing claims path pointers in ISO mdocs, aligning them more closely with JSON-based credentials for consistency.
news:
OpenID for Verifiable Credential Issuance (OpenID4VCI) is an OAuth 2.0-based protocol designed to standardize the issuance of Verifiable Credentials (VCs) in decentralized identity ecosystems. It ensures interoperability, security, and privacy across multiple VC formats like W3C VCs, ISO mdocs, and SD-JWT VCs. The framework supports roles like Credential Issuers, Wallets, and Authorization Servers, and offers features such as metadata discovery, holder binding, and privacy protections. The latest update refines credential binding, claims path processing, and aligns with the newest OpenID Federation draft.