Wallet
Credentials held in this session, bound to a holder key that never leaves the server.
Holder key
ES256 / P-256. Credentials are cryptographically bound to this key viacnf.jwk, and presentations are signed with it, which is what makes a credential more than a bearer token.
kid _YX4mD-8TEEMJT2kFtcjjDycAkdgoQxcZ8_lE64LI2MHeld credentials (0)
No credentials yet. Request one below.
Request a credential
Sends you to Keycloak to authenticate, then fetches the credential. You must be entitled to it — the issuer console grants that.