How to configure an issuer
Set an issuer's metadata and behaviour after creating it.
Scope: issuers.manage · Reference: Issuers_Update
curl -sS -X PATCH "$MGMT/issuers/$ISSUER?api-version=2026-08-30" \
-H "Authorization: ApiKey $DILIGENCE_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"displayName": "Workforce Credentials",
"statusMechanism": "StatusList",
"requireHolderBinding": true
}'
Only the fields you send change. Omitting a field leaves it as it was; it does not clear it.
Do it safely
Read first, then quote the entity tag:
ETAG=$(curl -sS -D - -o /dev/null "$MGMT/issuers/$ISSUER?api-version=2026-08-30" \
-H "Authorization: ApiKey $DILIGENCE_API_KEY" | grep -i '^etag:' | cut -d' ' -f2- | tr -d '\r')
curl -sS -X PATCH "$MGMT/issuers/$ISSUER?api-version=2026-08-30" \
-H "Authorization: ApiKey $DILIGENCE_API_KEY" \
-H "Content-Type: application/json" \
-H "If-Match: $ETAG" \
-d '{ "displayName": "Workforce Credentials" }'
A 412 means someone else changed it since you read. Re-read, re-apply your change, retry. See
handle concurrency.
After configuring
Configuration alone does not make an issuer able to issue. Check readiness, then activate it.