Presentation Exchanges

Nuts uses DIF Presentation Exchange for requesting and presenting credentials during authentication. It is specified by OpenID4VP and the vp_token bearer OAuth2 flow.

The party requesting a presentation, typically during access token negotiation, provides a Presentation Definition to the credential wallet. The Presentation Definition specifies which credentials the wallet must provide. If the wallet can't fulfill the definition, access token negotiation will fail.

Presentation Definitions are used for communicating the required credentials for a certain requested scope during access token negotiation (both service-to-service flow and user flow). They are also used by Discovery Services (more on that in another chapter).

Scope Policy

The following example requires a

See the DIF Presentation Exchange specification for more information.