Credentials Management

Credentials Management
If you need to revoke a legacy credential, please see  this section . 

 Dashboard page 

 The dashboard page is the page you are redirected to right after logging in. You can also access it by clicking to the DOME Logo in the upper left corner. 

 The dashboard page contains a table where each row represents a credential: 

 

 The first column displays the "Subject". For LEAR Credential Employees this corresponds to the Mandatee name. For LEAR Credential Machine, to the Mandatee domain. 

 The second colum displays the organization identifier. 

 The third column displays the credential type. 

 The fourth column displays the last time the credential was updated (for example, when it was activated, or when it was revoked ). 

 The fifth column displays the status. See more information about the different statuses below. 

 

 You can sort the credentials by clicking on a column header. The sorting order depends on the type of data in that column. 

 

 If you need to find one specific credential , you can use the search bar. To open it, click the search icon at the right top: 

 

 

 

 Credential statuses 

 In the fourth column the status of the credential is shown inside a coloured ellipse. Only "VALID" credentials are ready to be used in the DOME environment. 

 DRAFT : the credential has been issued but not activated (the mandatee hasn't added it to the their Wallet) 

 VALID : the credential has been issued and activated (the mandatee has added it to the their Wallet) 

 PEND_SIGNATURE : the credential has been issued and activated, but the signature process hasn't been completed, so the credential is still not valid. Look at "Credential Details > Actions " for more information. 

 EXPIRED : the credential has expired and is no longer valid. 

 REVOKED : the credential has been revoked and is no longer valid. 

 Credential details 

 To view the details of a credential, click on its row in the Dashboard table. You will be redirected to the Credential Details page. At the top of it, a box with the basic information of the credential is displayed (Credential type, status, valid from, valid until, contact email --of the credential holder).  In some cases,  some buttons will also be shown; see the "Actions" section below for more information. 

 

 

 Actions 

 "Send reminder": sending a new credential offer 

 When a credential has status " DRAFT ", you will see a "Send reminder" button in the "Actions" box.  By clicking this and then confirming, a new email will be sent to activate the credential. Thus, this is useful when the credential offer has expired.  

 Notice: Clicking "Send reminder" will issue a new credential offer, which will invalidate the previous one. Use this action judiciously. 

 

 

 

 

 "Sign credential" 

 Occasionally, a credential might not be signed correctly upon issuance due to the signing service being temporarily unavailable. In such cases, the credential will have a status of " PEND_SIGNATURE ", an email notification will be sent to the person responsible for the issuance (or the signing attempt in case of retrying) and a "Sign credential" button will appear in the Actions box. Click this button and then confirm  to sign the credential manually. If the signing process completes successfully, you will see a confirmation message, and the credential status will update to " VALID " once you refresh the page. The credential holder will then receive an email notification. 

 If you receive an error message instead, please wait a few hours and try again. If the issue persists after several attempts, contact support 

 

 

 . 

 "Revoke credential" 

 When a credential has status "VALID",  you will see a "Revoke" button in the "Actions" box.  See the " Credential Revokation " page to learn more about it.

Credential Revocation
If you need to revoke a legacy credential, please see section "2. Revoke Credential (legacy)". 

 1. Revoke Credential (standard) 

 Once a user activates a credential, its status in the Issuer is set to "VALID" (see the Credentials Management  article ). A valid credential can be revoked, which means it will be effectively disabled and can no longer be used for authorization purposes. 

 To revoke a credential, simply click the "Revoke" button and confirm the action. 

 

 

 After confirmation, a success message will be displayed, and you will be redirected to the credentials dashboard , where the credential's status will now appear as "REVOKED" . 

 

 

 You can also verify the revocation on the credential details page . 

 

 2. Revoke Legacy Credential 

 Old credentials can't be revoked in the way that has been explained in the previous section. Credentials of this type will have the "Revoke button" disabled . 

 

 When putting the mouse on it (or clicking on it), a tooltip message will be displayed with a link to the guide you are currently reading. 

 

 Legacy credentials must be manually added to the Revoked credentials list. Please check the Trust Framework guide to learn how to do so.