🔐 Trust Mark Issuer

Trust Mark Issuer

https://tmi.demo.dev.oidf.lab.surfconext.nl

Overview

This Trust Mark Issuer (TMI) is a federation entity that issues trust marks to entities that meet specific accreditation criteria. Trust marks are statements of conformance used for federation enrollment and trust establishment.

Entity Type:
Trust Mark Issuer
Federation Role:
Issues trust marks per OpenID Federation 1.0 (Section 7)
Status:
Active

Trust Mark Types

This issuer is authorized to issue the following trust mark types:

No trust mark types configured.

Federation Endpoints

These endpoints are used by other federation entities to interact with this Trust Mark Issuer:

Entity Configuration

GET https://tmi.demo.dev.oidf.lab.surfconext.nl/.well-known/openid-federation

Returns the entity's configuration including public keys and metadata

Trust Mark Endpoint

GET https://tmi.demo.dev.oidf.lab.surfconext.nl/trust-mark?trust_mark_type={type}&sub={entity_id}

Retrieves a specific trust mark for an entity (Section 8.6)

Trust Mark Status Endpoint

POST https://tmi.demo.dev.oidf.lab.surfconext.nl/trust-mark-status

Validates and returns the status of a trust mark (Section 8.4)

Trust Marked Entities Listing

GET https://tmi.demo.dev.oidf.lab.surfconext.nl/trust-marks?trust_mark_type={type}[&sub={entity_id}]

Lists entities with active trust marks (Section 8.5)

Admin API Documentation

Manage trust mark types and accreditation criteria through the Admin API:

📚 Open API Documentation (Swagger)

The Admin API requires an X-API-Key header for authentication.

Trust Mark Application

Entities can apply for trust marks by submitting a request to this issuer:

Application Endpoint

POST https://tmi.demo.dev.oidf.lab.surfconext.nl/apply-trust-mark

Request Body: 

{
  "subject_entity_id": "https://entity.example.com",
  "trust_mark_type": "https://example.com/trust-marks/type",
  "metadata": {
    // Optional: Additional information for accreditation
  }
}

Trust Chain Validation

This Trust Mark Issuer is itself a federation entity with a trust chain to a Trust Anchor. Other entities must:

  1. Establish trust in this TMI by building a trust chain to a common Trust Anchor
  2. Verify this TMI is authorized in the Trust Anchor's trust_mark_issuers claim
  3. Validate trust mark signatures using this TMI's Federation Entity Keys

Specification Compliance

This implementation follows:

View Specification