Create a credential configuration and authorise an issuer to use it
GENERATED — DO NOT EDIT DIRECTLY. Produced from the canonical OpenAPI specification by
developer-docs/tools/generate-reference.mjs. Edits are overwritten on the next run.
/management/credential-configurationsScope: credential-configurations.manage (or issuers.manage). The configuration inherits the issuer's environment. Creates the configuration, activates its first version and authorises the issuer in one call. Format dc+sd-jwt and algorithm ES256 are the platform's current limits, not defaults you can override. Authenticate with Authorization: ApiKey {key}. Every response carries x-ms-request-id, X-Correlation-Id and X-Request-Id; quote the request id in any support request. Returns 201 on success.
| Operation ID | CredentialConfigurations_Create |
| Plane | Management |
| Versioning | ?api-version=2026-08-30 |
| Authentication | Authorization: ApiKey {key} |
| Required scope | credential-configurations.manage |
| Concurrency | Not applicable |
Query parameters
| Name | Type | Required | Description |
|---|---|---|---|
api-version |
string |
Yes | Management API version. Supported: 2026-08-30. |
Request headers
| Name | Type | Required | Description |
|---|---|---|---|
x-ms-client-request-id |
string |
No | Optional caller-supplied correlation value, echoed back on the response and recorded in diagnostics. It never influences authentication, tenant or environment selection, resource lookup or idempotency. |
Request body
Type: CreatePublicCredentialConfigurationRequest
| Field | Type | Required | Description |
|---|---|---|---|
claims |
array, nullable |
No | |
credentialType |
string, nullable |
No | |
defaultLifetimeDays |
integer (int32) |
No | |
displayName |
string |
Yes | |
format |
string, nullable |
No | |
holderBindingRequired |
boolean |
No | |
identifier |
string |
Yes | |
issuerId |
string |
Yes | |
reason |
string, nullable |
No | |
schemaId |
string |
Yes | |
signingAlgorithm |
string, nullable |
No | |
statusEnabled |
boolean |
No |
Responses
| Status | Body | Meaning |
|---|---|---|
201 |
ManagementResourceOfPublicCredentialConfigurationResponse |
Created. |
400 |
ErrorEnvelope |
The request was not valid. See error model. |
401 |
ErrorEnvelope |
Authentication failed — the API key is missing, malformed, revoked or expired. |
403 |
ErrorEnvelope |
Authenticated, but the key does not carry the required scope. |
404 |
ErrorEnvelope |
Not visible to this caller. A resource in another tenant or environment reports as not found. |
409 |
ErrorEnvelope |
The request conflicts with the resource state, or an idempotency key was reused with a different payload. |
429 |
ErrorEnvelope |
Throttled. See rate limits. |
Response headers: x-ms-request-id
Example
curl -X POST "https://api.example.diligence.id/management/credential-configurations?api-version=2026-08-30" \
-H "Authorization: ApiKey YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{ }'