Trust domains: Policy
Catalog id: resource.trustDomains.policy
Tenant-wide OpenID4VP allowed cap and defaults posture. Lower scopes (verifier, DCQL, template) must stay within Allowed when that list is non-empty. Defaults apply when nothing more specific is set.
Guide: Trust domains.
Open it
| Navigation | Resources > Trust domains > Policy |
| Deep link | #resource=trustDomains&rarea=policy |
| Scope | Tenant |
What you configure
- Allowed: hard cap for every lower-level selection and for tenant defaults. Empty means no tenant cap.
- Defaults: fail closed, trust all (unrestricted issuer identity), or a custom ordered domain list. Custom entries must appear in Allowed when Allowed is set.
Signature, status, holder binding, and protocol validation still apply under trust-all.
REST
Get tenant OID4VP selection:
- Overview
- Request
- Response
Get tenant OID4VP trust-domain selection
Endpoint: GET /api/trust-domain/v1/oid4vp/trust-domains
Captured response: 200 OK
This captured endpoint is shown from the E2E run; it is not mapped to one of the generated EDK REST API reference pages.
Connect an environment to rewrite this call to real service bases and run it.
Put tenant OID4VP selection:
- Overview
- Request
- Response
Put tenant OID4VP trust-domain selection
Endpoint: PUT /api/trust-domain/v1/oid4vp/trust-domains
Captured response: 200 OK
This captured endpoint is shown from the E2E run; it is not mapped to one of the generated EDK REST API reference pages.
Connect an environment to rewrite this call to real service bases and run it.
Trust domain API. Guide: Trust domains.