Microsoft Entra Verified ID

azure Identity providerazure-entra-verified-id

Issues and verifies W3C Verifiable Credentials signed with a did:web decentralized identifier.

Provider: azure
Kind: Identity provider
Category: Security
Official docs: https://learn.microsoft.com/en-us/entra/verified-id/decentralized-identifier-overview
Also known as: Azure AD Verifiable Credentials

Properties · 5 set by this component

property	type	values	required	kind default	this component
authorizationModel	enum	none \| rbac \| abac \| rebac	no	rbac	▸ none
centralised · advanced	boolean	—	no	true	▸ false
domainBindingVerified · component property	boolean	—	no	true	inherited
keyStorage · component property	enum	key-vault	no	key-vault	inherited
managed	boolean	—	no	true	▸ true
mfa	boolean	—	no	false	▸ false
protocol	enum	oidc \| saml \| oauth2 \| iam \| custom	no	oidc	▸ custom
role · component property	enum	issuer \| verifier \| both	no	both	inherited
trustSystem · component property	enum	did-web	no	did-web	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "entra-verified-id", component: "azure-entra-verified-id" }

Other Identity provider products · 47

Resource Access Managementalibaba-ramalibabacloudidentity-provider Amazon Cognitoaws-cognitoawsidentity-provider Amazon Cognito identity poolaws-cognito-identity-poolawsidentity-provider AWS Directory Serviceaws-directory-serviceawsidentity-provider AWS IAMaws-iamawsidentity-provider AWS IAM Identity Centeraws-iam-identity-centerawsidentity-provider AWS IAM Roles Anywhereaws-iam-roles-anywhereawsidentity-provider AWS Directory Service Simple ADaws-simple-adawsidentity-provider Microsoft Azure Attestationazure-attestationazureidentity-provider Microsoft Entra Domain Servicesazure-entra-domain-servicesazureidentity-provider Microsoft Entra External IDazure-entra-external-idazureidentity-provider Microsoft Entra IDazure-entra-idazureidentity-provider Azure IoT Hub Device Provisioning Serviceazure-iot-dpsazureidentity-provider Managed identities for Azure resourcesazure-managed-identityazureidentity-provider Cloudflare One identity providercloudflare-one-identity-providercloudflareidentity-provider Active Directory Domain Servicesactive-directoryidentity-provider Athenzathenzidentity-provider Auth0auth0identity-provider Autheliaautheliaidentity-provider authentikauthentikidentity-provider Clerkclerkidentity-provider Dexdexidentity-provider FreeIPAfreeipaidentity-provider Generic identity provideridentity-provideridentity-provider Keycloakkeycloakidentity-provider OAuth2 Proxyoauth2-proxyidentity-provider Oktaoktaidentity-provider OpenFGAopenfgaidentity-provider OpenLDAPopenldapidentity-provider Oryoryidentity-provider Ping Identity Platformping-identityidentity-provider SpiceDBspicedbidentity-provider SPIREspireidentity-provider Stytchstytchidentity-provider WorkOSworkosidentity-provider Zitadelzitadelidentity-provider Cloud Identitygoogle-cloud-identitygcpidentity-provider Firebase Authenticationgoogle-firebase-authgcpidentity-provider Google Identity Platformgoogle-identity-platformgcpidentity-provider Managed Service for Microsoft Active Directorygoogle-managed-microsoft-adgcpidentity-provider

and 7 more → Identity provider page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Microsoft Entra Verified ID: issuance and verification of W3C Verifiable Credentials signed with a
3# decentralized identifier. "Introduction to Microsoft Entra Verified ID": did:web is the trust system
4# Microsoft supports; "Advanced Microsoft Entra Verified ID setup": signing keys live in Azure Key Vault
5# and domain ownership is verified during setup, so the credential is not an authorization decision.
6schemaVersion: "1"
7type: "component"
8id: "azure-entra-verified-id"
9kind: "identity-provider"
10provider: "azure"
11docs: "https://learn.microsoft.com/en-us/entra/verified-id/decentralized-identifier-overview"
12aliases: ["Azure AD Verifiable Credentials"]
13defaults:
14  protocol: "custom"
15  authorizationModel: "none"
16  centralised: false
17  managed: true
18  mfa: false
19properties:
20  trustSystem:
21    type: "enum"
22    values: ["did-web"]
23    default: "did-web"
24  keyStorage:
25    type: "enum"
26    values: ["key-vault"]
27    default: "key-vault"
28  domainBindingVerified:
29    type: "boolean"
30    default: true
31  role:
32    type: "enum"
33    values: ["issuer", "verifier", "both"]
34    default: "both"

The same page as markdown, for an agent: /catalogue/components/azure-entra-verified-id.md