Skip to content

SD-JWT .NET Documentation

SD-JWT .NET Logo

A .NET ecosystem for Selective Disclosure JSON Web Tokens, verifiable credentials, wallet interoperability, and delegated agent trust. 21 NuGet packages plus an ASP.NET Core issuer reference server. 2,500+ xUnit tests. RFC 9901, OpenID4VC, SIOPv2, W3C VCDM 2.0, ISO 18013-5, eIDAS 2.0, and preview Agent Trust extensions.


The Big Picture

Digital credential systems have five common jobs:

  1. Issue a credential into a wallet.
  2. Store it safely.
  3. Present only the required claims.
  4. Verify the credential and holder binding.
  5. Check trust, status, and policy.

SD-JWT .NET provides .NET packages for each part of that lifecycle.

flowchart LR
    Issuer["Issuer<br/>Creates credential"]
    Wallet["Wallet / Holder<br/>Stores credential"]
    Verifier["Verifier<br/>Requests proof"]
    Status["Status List<br/>Revocation / suspension"]
    Trust["Trust Layer<br/>Federation / HAIP / EUDIW"]
    Agent["Agent Runtime<br/>Preview Agent Trust"]
    Tool["Tool / API<br/>Verifies capability"]

    Issuer -->|"OID4VCI<br/>Issue"| Wallet
    Wallet -->|"OID4VP / DC API<br/>Present"| Verifier
    Verifier -->|"Check"| Status
    Verifier -->|"Resolve"| Trust
    Agent -->|"Capability SD-JWT"| Tool

Each concept page in this documentation focuses on one part of that lifecycle. If you are new to digital credentials, read the concept pages in order before diving into code.


Who this is for

You Are Start Here Goal
Decision Maker evaluating adoption Capability Matrix Understand ecosystem coverage and roadmap
Architect designing a credential system Ecosystem Architecture Design issuer, verifier, wallet, and trust infrastructure
Developer building an integration 15-Minute Quickstart Issue, present, and verify your first SD-JWT
Security Engineer reviewing the stack HAIP Profile Validation Validate cryptographic and policy controls
Operations preparing for production Deployment Patterns Plan infrastructure and key management

Choose Your Path

I need core SD-JWT

I am building issuer, verifier, or wallet infrastructure

I am securing AI agents or enterprise tool calls


Why SD-JWT .NET?

Pillar What It Means
Standards-Aligned Coverage RFC 9901, OpenID4VCI/VP 1.0, DIF PEX v2.1.1, OpenID Federation 1.0, HAIP 1.0, ISO 18013-5, plus tracked drafts
Enterprise Security HAIP Final flow/profile validation, algorithm enforcement, constant-time operations, replay prevention, zero-trust
Maturity-Labeled Packages Stable, Spec-Tracking, Profile, Reference, and Preview classifications in MATURITY.md
Full Credential Lifecycle Issuance, presentation, revocation, trust resolution, status checking, wallet storage

Learning path

flowchart LR
    QS[Quickstart<br/>15 min] --> Tutorials[Tutorials<br/>3 weeks]
    Tutorials --> Concepts[Concepts<br/>Architecture]
    Concepts --> Guides[How-To Guides<br/>Task-oriented]
    Guides --> Reference[Reference<br/>Lookup]
    Reference --> UseCases[Use Cases<br/>Industry]

Week 1: Fundamentals

  1. 15-Minute Quickstart - Build Issuer + Wallet + Verifier
  2. Running the Samples - Explore the interactive CLI
  3. SD-JWT - How selective disclosure works

Week 2: Standards & protocols

  1. Beginner → Advanced Tutorials - 19 hands-on tutorials
  2. Ecosystem Architecture - Package map and deployment patterns
  3. OpenID4VCI + OpenID4VP - Issuance and presentation protocols

Week 3: Production

  1. HAIP Profile Validation - HAIP Final flows, credential profiles, and policy enforcement
  2. How-To Guides - Task-oriented implementation guides
  3. Reference Patterns - Industry reference patterns and trust workflows

Documentation map

Section Purpose Start With
getting-started/ First-run tutorials and environment setup quickstart.md
concepts/ Architecture, design, and protocol explanations Concepts Index
tutorials/ Step-by-step tutorials (beginner → advanced) Tutorials Index
guides/ Task-oriented implementation guides Issuing Credentials
reference-patterns/ Industry reference patterns and trust workflows Reference Patterns Index
examples/ End-to-end integration examples Examples Index
reference/ Capabilities, standards, platform support Reference Index
reference/security.md Security model and deployment guidance Security Model
reference/platform-support.md Target frameworks, platforms, and benchmarks Platform Support
reference/standards-status.md Specification status and package maturity Standards and Maturity Status
proposals/ Design proposals for planned features Proposals Index

Ecosystem packages

Core

Package Specification Status
SdJwt.Net RFC 9901 (SD-JWT) Stable
SdJwt.Net.Vc SD-JWT VC draft-16 Spec-Tracking
SdJwt.Net.StatusList Token Status List draft-20 Spec-Tracking
SdJwt.Net.VcDm W3C VCDM 2.0 Stable

Protocols

Package Specification Status
SdJwt.Net.Oid4Vci OpenID4VCI 1.0 Final Stable
SdJwt.Net.Oid4Vp OpenID4VP 1.0 + DC API Stable
SdJwt.Net.SiopV2 SIOPv2 draft 13 Spec-Tracking
SdJwt.Net.PresentationExchange DIF PEX v2.1.1 Stable
SdJwt.Net.OidFederation OpenID Federation 1.0 Stable

Profiles and formats

Package Specification Status
SdJwt.Net.HAIP HAIP 1.0 Final Profile
SdJwt.Net.Mdoc ISO 18013-5 mDL Stable

Reference infrastructure

Package Purpose Status
SdJwt.Net.Wallet Holder-side reference framework Reference
SdJwt.Net.Eudiw EUDIW / ARF reference helpers Reference
SdJwt.Net.Oid4Vci.AspNetCore Issuer reference server (not published as NuGet) Reference

Agent trust

Package Purpose Status
SdJwt.Net.AgentTrust.Core Capability token mint/verify Preview
SdJwt.Net.AgentTrust.Policy Rule-based policy engine Preview
SdJwt.Net.AgentTrust.AspNetCore Inbound verification middleware Preview
SdJwt.Net.AgentTrust.Maf MAF/MCP outbound propagation Preview
SdJwt.Net.AgentTrust.OpenTelemetry Metrics and telemetry receipts Preview
SdJwt.Net.AgentTrust.Policy.Opa OPA external policy engine Preview
SdJwt.Net.AgentTrust.Mcp MCP trust interceptor/guard Preview
SdJwt.Net.AgentTrust.A2A Agent-to-agent delegation Preview

Enterprise planning


Source repository

This documentation is part of the SD-JWT .NET open source project, maintained under the OpenWallet Foundation Labs umbrella.