Demo

Wallet How to use Technical details
Keycloak and the EUDI Wallet

Issue and verify EUDI Wallet credentials with Keycloak

enpit connects your Keycloak to the European Digital Identity Wallet. Keycloak issues credentials into your users' wallets and accepts them at sign-in. Your users, roles and applications stay where they are.

Try it now

Try it in three steps

1Get your enpit Demo Pass

Sign in with the demo account below. Keycloak then issues a pass with the account's name and email address.

2Keep it in the wallet

Open the enpit wallet and accept the pass. The wallet shows who issued it and which data it holds.

3Sign in with the wallet

Sign in to this page without a password. On the Keycloak page, choose "Sign in with EUDI wallet" and share your pass.

Not signed in

What you get

Your Keycloak stays

Keycloak issues and verifies the credentials. You keep your users, roles and clients.

Open standards

OpenID for Verifiable Credentials and SD-JWT VC, as required for the EUDI Wallet.

Trust built in

Keycloak checks wallets and issuers with certificates from trusted lists. Your service is registered as a relying party.

Less data shared

Your service asks only for the data it needs. The user sees the request and decides.

Want this for your Keycloak? Talk to enpit

Technical details

Configuration

About this setup

The wallet gets credentials from Keycloak and signs in with them. Keycloak trusts the wallet and the issuer through trusted lists. Wallet Keycloak Trusted lists OpenID4VCI OpenID4VP 1 key copied

Gaps to real EUDI use

    How to use this demo
    Wallet links
    Browsers can't open openid-credential-offer:// or openid4vp:// links. Scan the QR code with your wallet, or paste the link into it. To open them with a click on macOS or Linux, run eudi wallet register.
    Credential offers
    Your wallet downloads the offer from Keycloak, so it needs to reach Keycloak. An offer works once.
    Trust & certificates
    Trusted lists

    Issuer