Credentials, Decentralized and Delivered

The emergence of the EU Digital Identity Wallet marks an important milestone in digital identity - but its real impact lies in how enterprise Identity Fabrics evolve to consume and govern trusted identity data from external ecosystems.

This session explores how verifiable identity attributes, professional qualifications, mandates, and powers of representation can be integrated into enterprise identity architectures to simplify trust, strengthen authorization, and reduce reliance on locally managed identity data. Rather than treating EUDI Wallet as another authentication mechanism, organizations can leverage it as a trusted source of verifiable identity and authorization information that integrates seamlessly into the broader Identity Fabric.

Attendees will gain practical insights into how enterprises can prepare their Identity Fabrics for a future where trusted identity, verified credentials, and portable authorizations become foundational building blocks for secure collaboration across organizational boundaries.

Decentralized identity is often seen as promising – but how does it actually integrate into existing enterprise structures? In the WEB3DORS project at Fraunhofer FIT, we designed, implemented, and evaluated organizational digital identities for employees, assets, and services, sitting at the heart of a range of practical use cases. Fraunhofer served as an example organization, but the findings are transferable to organizations more broadly. Drawing on concrete project experience, this talk shares the lessons learned and their relevance for other organizations.

Enterprises have spent years unifying identity, access, and network signals into a single policy layer that can grant or deny access in real time. That convergence solves who gets in, but not what happens to sensitive data once access is granted. 

This panel looks at the gap between access assurance and actual data protection, and asks whether the same continuous, context-aware policy engine built for authentication and authorization can be extended to account for data sensitivity, residency, and lineage.