Page History

...

1. Add to Configuration: Add authority_hints in your issuer’s metadata configuration: 

   Code Block
   language yml
   authority_hints: - "https://openidfed-test-1.sunet.se:7001"

2. Purpose: This parameter establishes hierarchical trust relationships from your issuer to the Trust Anchor.

...

The following Trust Marks are available for issuance:

• EHIC Credential:

  id

  • 
    

    ID:

  "

  • http://dc4eu.example.com/EHICCredential/se

  "

• PDA1 Credential:

  • 
    

    id:

  "

  • http://dc4eu.example.com/PDA1Credential/se

  "

Issuing Trust Marks

1. Inputs to Trust Mark Issuer:

   • id: The identifier for the Trust Mark (e.g., http://dc4eu.example.com/EHICCredential/se).
   • sub: The entity's unique identifier (entity_id).

2. Steps:

   • Contact the Trust Mark Issuer:

     https://openidfed-test-1.sunet.se:6001TBD
     

   • Supply the id and sub to the Trust Mark Issuer.
   • Retrieve the issued Trust Mark as a signed JWT.

3. Validation:

   • Use a JWT library to verify the Trust Mark's signature using the Trust Mark Issuer's public key:
     • Retrieve public keys from the Trust Mark Issuer's .well-known/jwks.json endpoint.
     • Validate claims such as iss, sub, id, and iat for compliance.

4. Include in Metadata: Add issued Trust Marks to your issuer’s metadata:

   trust_marks:
     - "eyJhbGciOiJIUzI1NiIsInR..."
     - "eyJhbGciOiJIUzI1NiIsInR..."
   

...