Revoke Accreditation
The following steps will define how to revoke a Verifiable Accreditation as a RTAO or TAO.
Step 1 Obtain tir_write access token in Auth API to write to the TIR
To request a tir_write access token, you need to present proof of ownership of your Verifiable Authorisation for Trust Chain to the EBSI Authorisation API with the openid tir_write scope.
Follow this sequence of API calls to request a tir_write access token:
- GET Presentation definition: Begin by fetching the presentation definition for the
tir_writescope. - POST Token Endpoint: Create and submit a presentation according to the fetched definition.
For further details, please consult our Access Control guide.
Step 2 Register the revocation in the Trusted Issuers Registry
Revocation of a Verifiable Accreditation will be done through the Trusted Issuer Registry by the RTAO/TAO who originally invited the Legal Entity.
The RTAO/TAO must set the issuerType to revoked to revoke an existing Verifiable Accreditation or the invitation.
Verifiable Accreditations must contain credentialStatus with type EbsiAccreditation, where validity is determined by the smart contract.
Use the following endpoint to modify the attribute metadata using the setAttributedata method: