Business Wallet
The Credenco Business Wallet lets your organization issue, hold, and verify verifiable credentials. Everything you can do in the web UI is also available through the REST API. Credentials are exchanged over OpenID4VC and follow the W3C Verifiable Credentials data model, so they work with other wallets that implement the same standards.
The wallet has three modules:
| Module | What it does |
|---|---|
| Issuer | Issues credentials, such as certificates or registrations, to people, organizations, or products. |
| Holder | Stores the credentials your organization has received and presents them when asked. |
| Verifier | Requests credentials from other parties and checks that they are valid, unrevoked, and from a trusted issuer. |
Use cases
Each use case follows one real-world scenario from start to finish and shows the Issuer, Holder, and Verifier modules working together.
- BIG Register: verify a healthcare professional's BIG registration.
- Mortgage: collect and verify the documents for a mortgage application.
- Supplier Onboarding: qualify a supplier by requesting their company credentials.
Guides
| Guide | Covers |
|---|---|
| Issue Credentials | Set up issuer and credential templates, then issue credentials manually or from your backend. |
| Direct Issue | Issue a credential straight into a trusted contact's wallet inbox, without a QR code. |
| Credential Status | Suspend and revoke issued credentials with status lists. |
| Receive Credentials | Create verifier templates and receive credentials from other parties. |
| Public Profile | Publish your organization's public profile so others can recognize you. |
| Catalog Sources | Connect credential catalogs to reuse existing credential type definitions. |
| API Access | Create Client IDs and API keys for programmatic access. |
| Identifiers & Keys | Import keys and connect an external key management service. |
| User Management | Manage users and roles, and send password reset emails. |
| Integrations | Receive wallet events as CloudEvents over a webhook, or over Kafka or JMS on-premise. |
API reference
The API section documents every Business Wallet REST endpoint, grouped as follows:
| Group | Includes |
|---|---|
| Issuer | Issuing credentials, issuance status, revocation. |
| Verifier | OpenID4VP authorization requests and presentation status. |
| Miscellaneous | Wallets, identifiers and keys, public profile, trusted contacts, users, roles, and integrations. |
Start with Authentication to get an access token or API key. The same reference is also available in Swagger UI.
Deployment
Credenco hosts and maintains the Business Wallet as a SaaS service. You don't need to run any infrastructure, and updates are applied for you.
If your organization needs data residency, network isolation, or full control over its infrastructure, you can run the Business Wallet on-premise with the same features and APIs. See On-premise Deployment for installation and configuration.
Standards
Issuance and verification follow these interoperability profiles:
- DIIP V3, V4, and V5, from the FIDES Community.
- HAIP (OpenID4VC High Assurance Interoperability Profile), from the OpenID Foundation.
Any wallet or verifier that implements the same profile can exchange credentials with the Business Wallet.