Credora Docs

Issuer Authentication

Secure authentication and verification process for institutional certificate issuers

Issuer Authentication

Issuer Authentication

Overview

Issuer Authentication is a more comprehensive process than user authentication, designed specifically for institutions, organizations, and authorized parties who will issue certificates. This process includes additional verification steps to ensure legitimacy and prevent fraud.

Authentication Requirements

Primary Authentication

  1. Wallet Connection: Institutional wallet address
  2. Email Verification: Official institutional email
  3. Organization Verification: Legal entity validation

Additional Verification Steps

  • Domain Verification: Prove ownership of institutional domain
  • Document Upload: Legal authorization documents
  • Identity Verification: Authorized representative identification

Step-by-Step Process

Step 1: Initial Authentication

Similar to user authentication but with institutional focus:

  • Connect institutional wallet
  • Provide official organization email
  • Specify organization type (University, Company, Government, etc.)

Step 2: Organization Details

Required Information:

  • Organization name
  • Legal registration number
  • Physical address
  • Official website
  • Contact information
  • Organization type/category

Step 3: Document Verification

Required Documents:

  • Business registration certificate
  • Tax identification documents
  • Authorization letter for certificate issuance
  • Identity proof of authorized representative

Step 4: Domain Verification

  • Verify ownership of organization's domain
  • DNS verification or file upload method
  • Links email domain to organization

Authentication Levels

Level 1: Basic Issuer

  • Basic wallet and email verification
  • Limited certificate issuance capacity
  • Manual review required for certificates

Level 2: Verified Issuer

  • Full document verification completed
  • Higher issuance limits
  • Automatic certificate approval for standard templates

Level 3: Premium Issuer

  • Enhanced verification with third-party validation
  • Unlimited issuance capacity
  • Custom certificate templates
  • Priority support

Verification Timeline

Typical Processing Times

  • Automatic Checks: Instant (wallet, email, domain)
  • Document Review: 2-5 business days
  • Manual Verification: 5-10 business days for complex cases
  • Appeals Process: Up to 15 business days

Security Measures

Fraud Prevention

  • Multi-signature Verification: Required for high-value certificates
  • Audit Trails: Complete logging of all issuer activities
  • Periodic Re-verification: Annual verification renewal
  • Suspicious Activity Monitoring: AI-powered fraud detection

Compliance Features

  • Regulatory Compliance: GDPR, CCPA, and regional requirements
  • Data Retention: Secure storage of verification documents
  • Access Controls: Role-based permissions for team members

Database Integration

Issuer Registration Process

  1. Create issuer profile in database
  2. Store verification status and documents
  3. Set up issuer permissions and limits
  4. Generate API keys for integration

Status Tracking

  • Pending: Initial application submitted
  • Under Review: Documents being verified
  • Verified: Full verification completed
  • Suspended: Temporary access restriction
  • Revoked: Permanent access removal

Team Management

Multi-User Access

  • Add team members to issuer account
  • Role-based permissions (Admin, Editor, Viewer)
  • Activity tracking for team actions
  • Secure invitation system

Integration Options

API Access

  • RESTful API for certificate issuance
  • Webhook notifications for status updates
  • Bulk issuance capabilities
  • Integration documentation and SDKs

Platform Integration

  • Single sign-on (SSO) options
  • White-label solutions
  • Custom branding options
  • Embedded certificate widgets

Common Verification Issues

Document Rejection Reasons

  • Insufficient Quality: Blurry or incomplete documents
  • Invalid Documents: Expired or unofficial documents
  • Mismatch Information: Inconsistent organization details
  • Suspicious Activity: Potential fraud indicators

Resolution Process

  1. Detailed rejection notification
  2. Resubmission with corrections
  3. Direct support contact for complex cases
  4. Appeals process for disputed decisions

Support & Resources

During Verification

  • Dedicated issuer support team
  • Live chat for urgent issues
  • Email support for document questions
  • Phone support for verified issuers

Post-Verification

  • Onboarding assistance
  • Training materials and webinars
  • Best practices documentation
  • Regular check-ins for new issuers

Next Steps

After successful authentication and verification: