Authenticator Verified IDs doesn't support did:web DIDs with subpaths?

Rein Krul 0 Reputation points
2023-10-28T04:58:24.94+00:00

I'm trying to get a W3C Verifiable Presentation (known in the Authenticator app as Verified IDs) through SIOPv2 from the Microsoft Authenticator mobile app, where the verifier uses a did:web DID (not through Entra). When the did:web is "rooted" (e.g. did:web:example.com) the app can load the presentation request. But, as soon as I use a subpath (e.g. did:web:example.com:tenants:1) the app won't load the presentation request anymore.

Does anyone know if this observation is correct? And if so, if support for did:web DIDs with subpaths (as specified in the DID method specification) is planned to be implemented as some point?

This is a typical way to support multi-tenancy or when there's less control over what exact subdomains a deployment can use.

Microsoft Security Microsoft Authenticator
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.