SD-JWT-based Verifiable Digital Credentials (SD-JWT VC)#

Oliver Terbu (MATTR), Daniel Fett (Authlete), Brian Campbell (Ping Identity) — OAuth WG document

• Why: The leading JSON format for selectively disclosable verifiable credentials (the format behind most government/wallet pilots); this session shows it converging to working-group last call.
• What: Data formats plus validation and processing rules for verifiable credentials with JSON payloads, with and without selective disclosure, built on SD-JWT and the JWT extensibility model; defines issuer signature mechanisms (web-based metadata via .well-known/JWKs, inline x5c) and Type Metadata (claim schemas, rendering/display metadata).
• How: The -11/-12 churn is stabilization: vct#integrity added to the non-disclosable claim list, Status List tokens must be JWTs, lang→locale, JSON schema removed from Type Metadata, x5c required in the protected header, sd=always/sd=never recommended to avoid ambiguity, and the relationship to Key Binding (SD-JWT+KB) clarified. The slides close with "WGLC?"
• Where applicable: Digital credential ecosystems — government IDs, enterprise credentials, wallets. WG document on the cusp of last call; if your identity roadmap touches credentials at all, this is the format to build against.