Keycloak wallet demo

Issue a credential from Keycloak to the eudi-test.dev wallet, then log in to Keycloak with it. This is a shared test system, so use test data only.

1. Get a credential

Sign in with demo@eudi-test.dev and password demo, then give the offer to a wallet. Keycloak accepts the wallet's key attestation only if it chains to the published Wallet Provider list.

With a pre-authorized code the wallet gets the credential without a further sign-in. With an authorization code the wallet sends you to Keycloak to sign in again.

2. Log in with the wallet

Keycloak asks the wallet to present the credential and verifies it with OpenID4VP.

3. See the configuration

Open the admin console and sign in with viewer and password viewer. This account is read-only. The ETSI trust list and the wallet login are under Identity providers, the credential is under Client scopes.

Open the admin console