A-SIT Plus Wallet Demonstrator

Present Credentials Guide

		App Wallet		Remote Wallet
		on same device	on different device
Issue Credentials
» via QR	demo user	-	steps	-
» via Browser	demo user, IDA w/o 2nd Factor, IDA with 2nd Factor	steps	-	(implicitly in presentation)
Present Credentials
» remote	to eIDAS2 RP	steps	steps	steps
» remote	to IDA RP	steps	steps	steps
» proximity		-	steps	-
Sign Documents
» Wallet-Centric	ad-hoc certificate	steps	steps	steps
» Wallet-Centric	pre-loaded certificate	steps	steps	-
» RP-Centric		steps	steps	steps

Present Credentials from App Wallet

Remote Presentation to an eIDAS2 RP (Remote, OID4VP)

App Wallet: Cross Device (Wallet App on another device)

Requirement: Wallet App is installed on the phone and filled with relevant credentials
Browser on PC:
- Navigate to eIDAS2 RP: https://apps.egiz.gv.at/customverifier/#
- Select a use case to use a predefined login configuration
  1. The login parameters can also be adjusted under “Request Details”
- A QR code is displayed
Wallet App on the phone:
- Open the Wallet App
- Click on “Present Data” in the navigation bar
- Scan the QR code
- Confirm data sharing with the recipient / eIDAS2 RP
Browser on PC:
- At eIDAS2 RP: The user should be logged in and see their presented data

App Wallet: Same Device (Wallet App on the same device)

Requirement: Wallet App is installed on the phone and filled with relevant credentials
Browser on the phone:
- Navigate to eIDAS2 RP: https://apps.egiz.gv.at/customverifier/#
- Select a use case to use a predefined login configuration
  1. The login parameters can also be adjusted under “Request Details”
- A link for login via Wallet App (on the same device) is displayed
- Click “Open App Wallet”
Wallet App on the phone:
- Wallet App opens
- Confirm data sharing with the recipient / eIDAS2 RP
- Complete the login process
Browser on the phone:
- The browser opens on the phone
- The eIDAS2 RP page confirms: The user should be logged in and see their presented data

Remote Presentation to IDA SP (via eIDAS2 Adapter)

App Wallet: Cross Device (Wallet App on another device)

Requirement: Wallet App is installed on the phone and filled with relevant credentials
Browser on PC:
- Open IDA Demo SP: https://eid.egiz.gv.at/openID_demo/
- Click “OpenID Connect Login”
- Click “eIDAS Login”
- In the eIDAS node/connector, a country selection is displayed: Select “eIDAS Wallet”
- A QR code is displayed
Wallet App on the phone:
- Open the Wallet App
- Click on “Present Data” in the navigation bar
- Scan the QR code
- Confirm data sharing with the recipient / IDA SP
Browser on PC:
- (At eIDAS node: If the person has not yet been matched with a register entry, match via ID Austria or address data)
- Perform an IDA login. Use the same test identity for this IDA login as for “Issue Credentials to the App Wallet”
- Do not select:
  - Do not select: “No Alternative Login Method”
  - Do not select: “No Residence Available”
  - Do not select “Create New Register Entry” (this is no longer possible)
- At IDA SP: The user should be logged in and see their presented data

App Wallet: Same Device (Wallet App on the same device)

Prerequisites: The Wallet App is installed on the mobile device and filled with the relevant credentials.
Browser on mobile phone
- Open the IDA Demo SP: https://eid.egiz.gv.at/openID_demo/
- Click on the “OpenID Connect Login” button.
- Click on the “eIDAS Login” button.
- In the eIDAS Node/Connector, a country selection will be displayed: Select “eIDAS Wallet”.
- A link for logging in via the Wallet App (on the same device) will be displayed.
- Click on the link.
Wallet App on mobile device:
- Open the Wallet App.
- Approve the sharing of data with the recipient / IDA SP.
- Complete the login process.
Browser on mobile device:
- The browser will open on the mobile device.
- (At the eIDAS Node: If the person has not yet been matched with a register entry, they should be matched via ID Austria or via address data.)
- Perform an IDA login. For this IDA login, use the same test identity as the one used for “issuing credentials to the Wallet App”.
- Do not select:
  - “No Alternative Login Method”
  - “No Residence Available”
  - “Create New Register Entry” (not possible anymore)
- At IDA SP: ****The user should be logged in and see their presented data.

Present Credential: via Proximity (ISO-BLE)

TODO Coming soon

Issue & Present Credentials from Remote Wallet

Remote Wallet: Present to eIDAS2 RP (for IDA Users without eIDAS2 Wallet)

Requirement: Login credentials (username/password and optionally Digitales Amt as a second factor) are set up for a test identity
Browser on device (PC or phone):
- Navigate to eIDAS2 RP: https://apps.egiz.gv.at/customverifier/#
- Select a use case to use a predefined login configuration
  - The login parameters can also be adjusted under “Request Details”
- A link for login via Remote Wallet (Web-Service) is displayed
- Click “Open Remote Wallet”
Browser on device (PC or phone):
- The browser switches to the Remote Wallet page
- Confirm data sharing with the recipient / eIDAS2 RP
- Click “ID Austria” under “Login with ID Austria” (normally without representation unless a Power of Representation Credential is involved)
- Perform IDA login using username/password and optionally Digitales Amt as a second factor for the desired test identity
Browser on device (PC or phone):
- The browser switches back to the eIDAS2 RP page
- The user is logged in and sees their presented data

Remote Wallet: Present to IDA RP (for IDA users without an eIDAS2 Wallet)

Prerequisites:
- Login credentials (username/password and, if applicable, Digitales Amt as a second factor) are set up for a test identity.
Browser on device (PC or mobile):
- Open the IDA Demo SP: https://eid.egiz.gv.at/openID_demo/
- Click on the “OpenID Connect Login” button.
- Click on the “eIDAS Login” button.
- In the eIDAS Node/Connector, a country selection will be displayed: Select “eIDAS Wallet”.
- A link for logging in via Remote Wallet (Web Service) will be displayed.
- Click on the link.
Browser on device (PC or mobile):
- The browser switches to the Remote Wallet page.
- Approve the sharing of data with the recipient / eIDAS2 RP.
- Click “ID Austria” under “Login with ID Austria” (usually without representation unless a Power of Representation credential is involved).
- Perform IDA login using username/password and, if applicable, Digitales Amt as a second factor for the desired test identity.
Browser on device (PC or mobile):
- (At the eIDAS Node: If the person has not yet been matched with a register entry, they should be matched via ID Austria or via address data.)
- Perform another IDA login. For this IDA login, use the same test identity as the one used for “Issue credentials to App Wallet”.
- Do not select:
  - “No Alternative Login Method”
  - “No Residence Available”
  - “Create New Register Entry” (not possible anymore)
- The browser returns to the eIDAS2 RP page.
- The user is logged in and can see their presented data.