Issue from your own products
Use the API or SDK to add credential issuance to an existing service without rebuilding the user journey around a separate workspace.
SYS_OK
DEC_A
ID_VERIFIED
LIVENESS_1
DEC_A
ENCRYPT_256
LIVENESS_1
SYS_OK
ID_VERIFIED
ENCRYPT_256
Issue trusted credentials.Make verified results reusable.
Issue verifiable credentials from the systems you already use. Identra helps organizations move from a trusted result to a credential people can receive, keep, and reuse.
Fast integration
Your trust network
Wallet choice
Lifecycle controls
Why Credential Issuance
A practical path from verification to portable trust
Give teams the controls they need to issue credible, reusable credentials without hiding the trust decisions that make them valuable.
Choose the trust network
Use CertNet or connect a blockchain, ledger, or registry selected by your organization and its governance requirements.
Reach the wallet people choose
Prioritize OpenID4VCI through QR and deep links for Identra Wallet and compatible external wallets.
Operate beyond the first issue
Manage module versions, issuance history, status changes, suspension, revocation, expiry, and audit events.
How it works
One issuance model, two ways to put it into operation
Integrate directly through the API and SDK, with Dynamic Flow available as an additional channel when issuance belongs inside a verification journey.
01 · Connect
Connect a trusted business result
Choose the approved result or business event that should lead to a credential.
- Use results from your existing systems
- Define who may receive the credential
- Keep issuance policy consistent
02 · Integrate
Add issuance through the API or SDK
Create a clear issuance journey inside the product your customers already use.
- Start from an API call or SDK action
- Use Dynamic Flow as an optional channel
- Keep the holder experience familiar
03 · Issue
Sign and deliver with the right trust model
Use Identra-managed signing or connect infrastructure under your control.
- Publish DID Documents through a registry adapter
- Prioritize OpenID4VCI delivery
- Offer DIDComm when the journey requires it
04 · Operate
Manage the complete lifecycle
Keep every module and issued credential understandable after launch.
- Track drafts, releases, deprecation, and archives
- Suspend, revoke, or expire issued credentials
- Review issuance history and audit events
Your trust model
Managed convenience or infrastructure you control
Choose the operating model that fits your security responsibilities without changing the holder experience.
Identra-managed
Launch with a managed foundation
Identra can manage the core issuance operations so your team can focus on the service and the people receiving credentials.
- A shorter path from integration to issuance
- Managed identity and signing operations
- Guided status and lifecycle management
Self-managed
Keep signing authority in your environment
Connect a KMS, HSM, or external signer while Identra coordinates modules, delivery, and lifecycle workflows.
- Private keys remain outside Identra
- Connect supported signing infrastructure
- Choose did:web, ION, or an internal registry
Registry and network choice
Start with CertNet or connect a blockchain, ledger, or registry chosen by your organization. The right option depends on governance, interoperability, and operating requirements.
API and SDK at the core
Built for your operating model
Bring credential issuance into the services people already use
Engineering teams integrate issuance directly, while Dynamic Flow remains available when a credential should be issued as part of a verification journey.
Dynamic Flow
Use it as an additional channel when issuance follows an approved verification outcome.
API & SDK
Create issuance sessions, connect signing infrastructure, deliver offers, and manage status from your own system.
Shared outcome
A trusted credential ready for the holder’s wallet
Designed for real reuse
Issue proof that keeps working after the first interaction
Credential Issuance helps organizations turn a completed decision into portable evidence the holder can present again.
Education credentials
Issue degrees, certificates, and verified learning outcomes directly to a learner’s wallet.
Institution-issued · Holder-controlled · Easy to present
Reusable bank KYC
Convert an approved KYC result into a credential customers can reuse in a permissioned journey.
Based on verified results · Status-aware · Auditable
Standards direction
Built toward an interoperable credential ecosystem
Our direction follows W3C VC 2.0, DID Core, SD-JWT VC, JSON-LD/Data Integrity, ISO mdoc, and OpenID4VCI.
These standards describe product direction and interoperability goals; they are not a statement that every profile is production-ready today.
FAQ
Common questions before you issue
Understand where configuration ends, who controls signing, and how credentials reach a wallet.
The API and SDK path is designed for engineering teams. Dynamic Flow is an additional option for teams that want issuance inside a configured verification journey.
Yes. An approved KYC, education, membership, or other trusted result can trigger issuance when it meets the policy defined by your organization.
You can choose Identra-managed custody or connect your own KMS, HSM, or external signer so private keys remain in your environment.
Identra Wallet is the preferred experience, while OpenID4VCI is intended to support compatible external wallets as well. DIDComm remains an additional option.
Credential Issuance
Turn the next verified result into reusable proof
Review the integration overview or talk with Identra about the credential journey your organization wants to launch.