Get a wallet and your credentials
What you will get: a wallet with a verifiable credential of your organisation, to log in to the marketplace or to a service of the data space by scanning a QR code.
What you need
- A user in the credential issuer (Keycloak) of your organisation, with the credential bound to it. Your organisation's administrator creates it: see Join the data space.
- One of these wallets:
atesta-id-wallet, a desktop wallet for Linux and Windows made in CitCom. Download it from its releases page. It reads the QR codes from a screenshot, so you never need a phone. It is a prototype: it uses the EUDI protocols, but it is not a certified EUDI Wallet.
Lissi ID Wallet, from the Play Store. Scan the QR codes with the phone.
The Wallets page of the toolbox compares both wallets and lists the limitations of atesta-id-wallet.
Which credential
| Credential | You need it to | Who gives it to you |
|---|---|---|
LegalPersonCredential |
Act for your organisation in the marketplace: profile, offers, purchases | Your organisation, if you are its legal representative (LEAR) |
ServiceCredential |
Use a web service bought by your organisation, such as the MIAIS | Your organisation, with the role that the service asks for |
Programs do not use a wallet: they request a MachineCredential by themselves. See Use data from your code.
Steps
- Open the account console of your organisation's Keycloak and log in with your user:
- Your own connector:
https://<your Keycloak host>/realms/provider/account. - Identity created by the onboarding portal: the account console of your realm,
https://keycloak-onboarding.citcom-vrain-dataspace.eu/realms/<your realm>/account.
- Your own connector:
- Go to Verifiable Credentials and choose the credential.
- Click Issue to wallet. A QR code (or a link) appears.
- Scan it with the wallet:
- atesta-id-wallet: click the link, or press Scan QR and take a screenshot of the QR code.
- Lissi: scan the QR with the phone.
- The wallet shows who issues which credential. Accept, and enter your Keycloak user and password when the wallet asks for them.
- The credential appears in the wallet.
Check that it works
Open the marketplace and click Log in. Scan the QR code with the wallet. It shows what will be shared; press Share. The browser logs you in.
If something fails
| Symptom | Cause | Fix |
|---|---|---|
| You have no verifiable credentials yet in the account console | The credential is not bound to your user. Having the role is not enough | Ask your administrator to bind it (see Create the users) |
| The wallet rejects the offer, or the QR has expired | Offers are short-lived | Click Issue to wallet again |
| The verifier rejects the login | Your organisation is not trusted for this credential, or your roles do not match | For the marketplace, your organisation must be registered. For a service, it must have bought it, and you must have only the role it asks for |
| A service rejects a credential that has several roles | The verifier requires every data space role in the credential to be allowed by the purchase | Use a user with only the role of that service |