Verify Credentials

Gataca Studio enables you to quickly create customizable verification templates for onboarding and sign-in processes while reducing personal data stored in your infrastructure.

Verification templates define identity verification requirements that can be integrated into various applications.

A verification template outlines the entire verification process, including:

  • Required Verification Credentials: Specifies the credentials users must share to enable successful authentication.

  • Level of Trust: Determines the legitimacy of the credentials needed.

  • Additional Security Requirements: Specifies any extra security measures, such as two-factor authentication (2FA), that users must comply with.

Once the verification process is implemented, users simply scan a QR code on your website, consent to sharing the required data for identity verification, and gain access.

Create a Verification Template

To create a new verification template, navigate to the main dashboard or click Create Template in the Verification section.

Step 1: Configuration

Verification Template Identifier The first step is to name your verification template. This name will be associated with the verification process and will serve as the primary reference throughout the platform.

DID Choose the DID (Decentralized Identifier) you want to use as the Verifier. By default, a DID named “My DID” is pre-created for you and can be selected for your first verification template. If needed, you can create another DID.

QR Code Viewing Duration Set the duration (in seconds) that the QR code will be visible for users to scan. Once this time elapses, the QR code will expire, and users will need to reload the page to generate a new one. Each QR code has a unique session ID to ensure secure, one-time use.

Consent Duration Specify how long (in days) your organization will store and process the data shared by users. Ensure compliance with local data protection regulations, such as GDPR, which mandates minimizing the retention period for personal data.

When the consent duration has been reached, the user data will be deleted from your Studio account.

Service Description Briefly describe the service for which the user is requesting access.

Step 2: Request

Define which verifiable credentials are required for user verification.

1. Select data to request

You can scroll through the list or use the search bar to select the necessary credentials. If no additional information is required, select “ID Only.”

2. Requested data settings

Specify which credentials are essential (required) and which are nice-to-have information (optional). Required credentials are necessary to complete the credential issuance, while optional credentials provide additional, non-essential information.

By default they are marked as optional.

3. Requested data advanced settings (optional)

  • Level of trust

When requesting credentials from users, decide if they need to meet a specific level of trust.

The level of trust reflects how reliable the credential is and how confident you can be that the person presenting it is who they claim to be. This confidence is based on the trust framework in place.

This level, based on standards set by Gataca, is related to the eIDAS regulation’s levels of assurance.

  • Purpose

You can define the reason or intended use for requesting this credential. This helps clarify the context for both the issuer and the recipient.

  • Security configuration

Set up any additional security measures users must complete before receiving the issued credential, such as two-factor authentication (2FA) via biometrics, OTPs (one-time passwords), or in-app authentication.

Successful Configuration

Once you've configured the verification template, you’ll see a confirmation that the process has been successfully created. You can now test your template using our sandbox or can integrate your template with your system.

We recommend testing your templates in the sandbox before integrating it with your system. This allows you to experience the user process firsthand and ensures everything works as expected before going live.

Last updated