Introduction

The OpenID Bridge API provides endpoints for creating and managing OIDC providers that accept digital credentials for authentication. Each provider configuration maps credential claims to OIDC claims and connects to a client application via a standard client ID and secret.

Once configured, the Bridge acts as an OIDC identity provider: when a user authenticates, it initiates a proof request via Core, maps the submitted credential claims to the OIDC session, and returns an authorization code to the client — no changes required on the relying party side.

All Bridge endpoints are also available through the Enterprise Backend API, which is the recommended integration point for most deployments.

Key areas:

• OIDC provider lifecycle management (create, update, delete)
• Claim mapping configuration
• Standard OIDC protocol endpoints (authorization, token, JWKS)

Authentication: Bridge supports no authentication, static token, and STS modes. STS mode is recommended for production. See Authentication and authorization.

License: Enterprise → Contact sales