Credential

Set of a subject’s identity claims asserted by an IdM.

• e.g., identity cards.

Credentials also have metadata.

• Issuing date

• Validity periods: automatically limits usage if stolen or lost.

• Issuer identity attributes: identifies origin to establish trust.

• Issuing purpose: subject can have multiple scoped credentials.

  • Discloses only the required credential when accessing a service.