!!! Overview [{$pagename}] ([DID Auth]) is the mechanism by which an [entity] can cryptographically prove that they are associated with a [DID] and DID Description. %%warning [Authentication] is separate from [Authorization] because an [entity] may wish to enable other entities to update the [DID Document], for [example], to assist with [key recovery] without enabling them to prove [ownership] (and thus be able to [impersonate|Impersonation] the [entity]. %% The rules for Authentication are: ** [MAY] include an [authentication] property. ** The value of the [authentication] property should be an array of proof mechanisms ([{$applicationname}] assumes these are [Authentication Factors]). ** Each proof mechanism [MUST] include the type property. ** Each proof mechanism [MAY] embed or reference a [Public Key] !! [{$pagename}] [Example] {{{{ "@context": "https://w3id.org/did/v1", "id": "did:example:123456789abcdefghi", ... "authentication": [{ // this key can be used to authenticate as DID ...fghi "type": "RsaSignatureAuthentication2018", "publicKey": "did:example:123456789abcdefghi#keys-1" }, { // this key can be used to authenticate as DID ...fghi "type": "PseudonymousBiometricAuthentication2018", "biometricTemplate": "did:example:123456789abcdefghi#bio-1" }], ... } }}} !! [{$pagename}] and [Self-Issued OpenID Provider] The current [{$pagename}] [Working Group] working in coordination with editors of the [OpenID Connect] [specification] to combine the knowledge from the [DIF] community and the [OpenID Foundation] and are using [Self-Issued OpenID Provider] for [{$pagename}] within the [Verifiable Credentials]. [{Image src='https://miro.medium.com/max/1079/1*GoeFcYzRBavzan21-XonYA.png' caption='SIOP in the Context of W3C Verifiable Credentials' align ='left' style='font-size: 120%;'}]\\ !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }] ---- * [#1] - [W3C Decentralized Identifiers (DIDs)|https://w3c-ccg.github.io/did-spec/|target='_blank'] - based on information obtained 2018-11-29 * [#2] - [Using OpenID Connect with Decentralized Identifiers|https://medium.com/decentralized-identity/using-openid-connect-with-decentralized-identifiers-24733f6fa636|target='_blank'] - based on information obtained 2019-10-14 * [#3] - [Using OpenID Connect Self-Issued to achieve DID Auth|https://github.com/WebOfTrustInfo/rwot8-barcelona/blob/master/draft-documents/did-auth-oidc.md|target='_blank'] - based on information obtained 2019-10-14