Configuration for Issuing Credentials
This page provides a map of the most relevant configurations for credential issuers. For the complete list of all available configurations, see the Core Configuration Reference.
Basics
| Key | At a glance | Documentation |
|---|---|---|
format | Which credential formats you can issue, plus per-format defaults such as credential lifetime and revocation method. | Reference |
issuanceProtocol | How credentials are offered and delivered to wallets via OpenID4VCI, including token and code lifetimes, DPoP, redirect URIs and the offer URL scheme. | |
revocation | Methods for revoking or suspending issued credentials, and status list sizing. | Reference |
transport | Channels available for exchanging credentials. Issuance runs over HTTP. | Reference |
datatype | Validation rules for claim values in your credential schemas, such as patterns, numeric and date ranges, and allowed file types. | |
globalSettings.credentialSchema.maxExpirationSeconds | Upper limit on the expiration a credential schema can set. Defaults to 10 years. | Reference |
globalSettings.credentialSchema.maxBatchSize | Upper limit on the batch size a credential schema can set. Defaults to 20. | Reference |
Identifiers and keys
| Key | At a glance | Documentation |
|---|---|---|
identifiers | Which identifier types (X.509 certificate, CA, key, DID) you can use as an issuer. | Reference |
keyAlgorithm | Signing algorithms available for issuer key. | Reference |
keyStorage | Where issuer keys are kept, such as the encrypted internal database or Azure Key Vault. | Reference |
did | DID methods available for DID-based issuer identifiers, and limits on the keys each DID can hold. | Reference |
signer | Signers that issue X.509 certificates from a CA identifier, including the settings needed for mdoc issuer CAs. | Reference |
Ecosystems
| Key | At a glance | Documentation |
|---|---|---|
ecosystem | Constraints for regulatory ecosystems such as which schema IDs the ecosystem recognizes and which ones count as PID. | Reference |
trustListSubscriber | Trust list types your instance can subscribe to, for checking whether other parties are trusted. | Reference |
System
| Key | At a glance | Documentation |
|---|---|---|
app.coreBaseUrl | Base URL of your Core instance. Wallets and verifiers use this domain to reach Core. | |
globalSettings.defaultLanguage | Fallback language (BCP 47, default en) used where none is specified, such as during credential schema creation. |
|