Present Credentials Guide

		App Wallet		Remote Wallet
		on same device	on different device
Issue Credentials
» via QR		-	steps	-
» via Browser		steps	-	(implicitly in presentation)
Present Credentials
» remote	to eIDAS2 RP	steps	steps	steps
	to IDA RP	steps	steps	steps
» proximity		-	steps	-
Sign Documents
» Wallet-Centric	ad-hoc certificate	steps	steps	steps
	pre-loaded certificate	steps	steps	-
» RP-Centric		steps	steps	steps

Present Credentials from App Wallet

Remote Presentation to an eIDAS2 RP (Remote, OID4VP)

App Wallet: Cross Device (Wallet App on another device)

• Requirement: Wallet App is installed on the phone and filled with relevant credentials
• Browser on PC:
  • Navigate to eIDAS2 RP: https://apps.egiz.gv.at/customverifier/
  • Select a use case to use a predefined login configuration
    • The login parameters can also be adjusted under “Request Details”
  • A QR code is displayed
• Wallet App on the phone:
  • Open the Wallet App
  • Click on “Present” in the navigation bar
  • Select “Authenticate at relying party” (remote authentication)
  • Scan the QR code
  • Confirm data sharing with the recipient / eIDAS2 RP
• Browser on PC:
  • At eIDAS2 RP: The user should be logged in and see their presented data

App Wallet: Same Device (Wallet App on the same device)

• Requirement: Wallet App is installed on the phone and filled with relevant credentials
• Browser on the phone:
  • Navigate to eIDAS2 RP: https://apps.egiz.gv.at/customverifier/
  • Select a use case to use a predefined login configuration
    • The login parameters can also be adjusted under “Request Details”
  • A link for login via Wallet App (on the same device) is displayed: “Open App Wallet”
  • Click “Open App Wallet”
• Wallet App on the phone:
  • Wallet App opens
  • Confirm data sharing with the recipient / eIDAS2 RP
  • Complete the login process
• Browser on the phone:
  • The browser opens on the phone
  • The eIDAS2 RP page confirms: The user should be logged in and see their presented data

Remote Presentation to IDA SP (via eIDAS2 Adapter)

App Wallet: Cross Device (Wallet App on another device)

• Requirement: Wallet App is installed on the phone and filled with relevant credentials
• Browser on PC:
  • Open IDA Demo SP: https://eid.egiz.gv.at/openID_demo/
  • Click “OpenID Connect Login”
  • Click “eIDAS Login”
  • In the eIDAS node/connector, a country selection is displayed: Select “eIDAS Wallet”
  • A QR code is displayed
• Wallet App on the phone:
  • Open the Wallet App
  • Click on “Present” in the navigation bar
  • Select “Authenticate at relying party” (remote authentication)
  • Scan the QR code
  • Confirm data sharing with the recipient / IDA SP
• Browser on PC:
  • (At eIDAS node: If the person has not yet been matched with a register entry, match via ID Austria or address data)
  • Perform an IDA login. Use the same test identity for this IDA login as for “Issue Credentials to the App Wallet”
  • Do not select:
    • Do not select: “No Alternative Login Method”
    • Do not select: “No Residence Available”
    • Do not select “Create New Register Entry” (this is no longer possible)
  • At IDA SP: The user should be logged in and see their presented data

App Wallet: Same Device (Wallet App on the same device)

• Prerequisites: The Wallet App is installed on the mobile device and filled with the relevant credentials.
• Browser on mobile phone
  • Open the IDA Demo SP: https://eid.egiz.gv.at/openID_demo/
  • Click on the “OpenID Connect Login” button.
  • Click on the “eIDAS Login” button.
  • In the eIDAS Node/Connector, a country selection will be displayed: Select “eIDAS Wallet”.
  • A link for logging in via the Wallet App (on the same device) will be displayed.
  • Click on the link.
• Wallet App on mobile device:
  • Open the Wallet App.
  • Approve the sharing of data with the recipient / IDA SP.
  • Complete the login process.
• Browser on mobile device:
  • The browser will open on the mobile device.
  • (At the eIDAS Node: If the person has not yet been matched with a register entry, they should be matched via ID Austria or via address data.)
  • Perform an IDA login. For this IDA login, use the same test identity as the one used for “issuing credentials to the Wallet App”.
  • Do not select:
    • “No Alternative Login Method”
    • “No Residence Available”
    • “Create New Register Entry” (not possible anymore)
  • At IDA SP: The user should be logged in and see their presented data.

Proximity Presentation

Proximity Presentation with ISO-BLE

• Requirements:
  • The Wallet App is installed on the mobile device and provisioned with the relevant credentials (in ISO format).
  • A second device is available and the wallet app (as receiver) is installed.
  • On both devices, the relevant communication technologies are enabled (Bluetooth, NFC).
• Wallet on the phone of the presenter
  • Click on “Present” in the bottom navigation bar
  • Select “Present data to other citizen” (proximity authentication)
  • You should see a QR code for device engagement
• Wallet on the phone of the receiver
  • Click on “Check” in the bottom navigation bar
  • Select “QR-Code” as device engagement method
  • Select the data you would like to request/receive
  • Scan the QR code shown on the presenting device
• Wallet on the phone of the presenter
  • Accept the sharing of data on the consent screen
• Wallet on the phone of the receiver
  • The transmitted data of the presenter should be shown

Proximity Presentation with NFC-BLE

• Requirements:
  • The Wallet App is installed on the mobile device and provisioned with the relevant credentials (in ISO format).
  • A second device is available and the wallet app (as receiver) is installed.
  • On both devices, the relevant communication technologies are enabled (Bluetooth, NFC).
• Wallet on the phone of the receiver
  • Click on “Check” in the bottom navigation bar
  • Select “NFC” as device engagement method
  • Select the data you would like to request/receive
  • Hold the receiver’s phone to the presenter’s phone
    • Note: NFC can be finicky to place correctly and reliably
  • Note: After engagement via NFC, depending on your settings, BLE or NFC will be used to transmit the data
• Wallet on the phone of the presenter
  • Accept the sharing of data on the consent screen
• Wallet on the phone of the receiver
  • The transmitted data of the presenter should be shown

Issue & Present Credentials from Remote Wallet

Remote Wallet: Present to eIDAS2 RP (for IDA Users without eIDAS2 Wallet)

• Requirement: Login credentials (username/password and optionally Digitales Amt as a second factor) are set up for a test identity
• Browser on device (PC or phone):
  • Navigate to eIDAS2 RP: https://apps.egiz.gv.at/customverifier/#
  • Select a use case to use a predefined login configuration
    • The login parameters can also be adjusted under “Request Details”
  • A link for login via Remote Wallet (Web-Service) is displayed
  • Click “Open Remote Wallet”
• Browser on device (PC or phone):
  • The browser switches to the Remote Wallet page
  • Confirm data sharing with the recipient / eIDAS2 RP
  • Click “ID Austria” under “Login with ID Austria” (normally without representation unless a Power of Representation Credential is involved)
  • Perform IDA login using username/password and optionally Digitales Amt as a second factor for the desired test identity
• Browser on device (PC or phone):
  • The browser switches back to the eIDAS2 RP page
  • The user is logged in and sees their presented data

Remote Wallet: Present to IDA RP (for IDA users without an eIDAS2 Wallet)

• Prerequisites:
  • Login credentials (username/password and, if applicable, Digitales Amt as a second factor) are set up for a test identity.
• Browser on device (PC or mobile):
  • Open the IDA Demo SP: https://eid.egiz.gv.at/openID_demo/
  • Click on the “OpenID Connect Login” button.
  • Click on the “eIDAS Login” button.
  • In the eIDAS Node/Connector, a country selection will be displayed: Select “eIDAS Wallet”.
  • A link for logging in via Remote Wallet (Web Service) will be displayed.
  • Click on the link.
• Browser on device (PC or mobile):
  • The browser switches to the Remote Wallet page.
  • Approve the sharing of data with the recipient / eIDAS2 RP.
  • Click “ID Austria” under “Login with ID Austria” (usually without representation unless a Power of Representation credential is involved).
  • Perform IDA login using username/password and, if applicable, Digitales Amt as a second factor for the desired test identity.
• Browser on device (PC or mobile):
  • (At the eIDAS Node: If the person has not yet been matched with a register entry, they should be matched via ID Austria or via address data.)
  • Perform another IDA login. For this IDA login, use the same test identity as the one used for “Issue credentials to App Wallet”.
  • Do not select:
    • “No Alternative Login Method”
    • “No Residence Available”
    • “Create New Register Entry” (not possible anymore)
  • The browser returns to the eIDAS2 RP page.
  • The user is logged in and can see their presented data.