Integration & APIs
proConsul connects identity providers, credential issuers, PKI infrastructure and external systems through standards-based APIs and protocols — one integration instead of many.
Integration architecture
Designed to support diverse integration patterns, from real-time APIs to event-driven architectures.
Gateway to services — how external requests reach the platform
Services to data stores — how the platform coordinates state
Integration types
proConsul supports multiple integration patterns to accommodate diverse system requirements.
Connect to national identity systems, population registries, enterprise directories and external authentication providers. Support for OpenID Connect, SAML 2.0, OAuth 2.0 and LDAP, designed for OpenID Federation scenarios that establish trust across organizational boundaries.
Integrate with systems that issue and verify digital credentials — government agencies, educational institutions, professional bodies and enterprises. Engineered to align with W3C Verifiable Credentials, ISO/IEC 18013-5 mobile driving licences and X.509 certificate-based credentials.
Deep integration with TrustVault for all cryptographic operations and PKI services — HSM-backed key generation, certificate issuance, digital signing and validation. Support for hierarchical PKI structures, certificate policies and revocation mechanisms.
Integration with idGuard consumer wallets and EUDI wallet applications — credential delivery, update notifications and revocation signalling. Designed to support the EUDI Wallet ecosystem, engineered to align with ARF specifications.
Export logs, metrics and security events to enterprise monitoring systems, SIEM platforms and security operations centres. Real-time alerting, anomaly detection and incident-response coordination.
Integration with external data sources for attribute verification, fraud detection and threat intelligence. Support for real-time API queries and batch data synchronisation.
OpenID Federation support
Designed to support OpenID Federation for establishing trust across organizational and national boundaries.
Federated trust
OpenID Federation enables trust relationships between identity providers, credential issuers and relying parties across organizational boundaries. proConsul orchestrates federation metadata, entity statements and trust-chain validation — critical for cross-border EUDI Wallet scenarios and international identity federation.
Issuance flow — RP-ID QR to wallet to relying party
EUDI Wallet ecosystem
Designed to support the European Digital Identity Wallet ecosystem, engineered to align with the Architecture Reference Framework (ARF) specifications.
EUDI Wallet — trust and lifecycle flow
EUDI Wallet — payments use-case flow
Support for Wallet Secure Cryptographic Device (WSCD) attestation. Integration with trusted execution environments, secure elements and hardware security modules provides cryptographic assurance of wallet authenticity.
Support for multiple credential formats required by the EUDI ARF, including ISO/IEC 18013-5 mDL (mobile driving licence), W3C Verifiable Credentials and SD-JWT (Selective Disclosure JWT).
Orchestrate cross-border credential recognition scenarios. Manage attribute mapping, trust-framework alignment and mutual-recognition agreements between member states.
Connect with national and European trust frameworks. Integrate with qualified trust service providers (QTSPs), national identity schemes and attribute providers across the EUDI ecosystem.
Engineered to align with these standards; interoperability depends on deployment and the participating parties.
API capabilities
Comprehensive REST and GraphQL APIs for programmatic platform access.
Integration patterns
Common patterns for connecting proConsul to your ecosystem.
Direct API calls for real-time operations. The client makes a request, proConsul processes it immediately and returns a response — suited to low-latency needs like authentication, credential verification and policy evaluation.
Long-running operations use asynchronous patterns. The client submits a request, receives a job identifier, then polls for completion or subscribes to a webhook — suited to credential issuance requiring approvals, batch operations and report generation.
Subscribe to platform events via webhooks or message queues. Receive notifications for credential lifecycle events, policy changes, threat alerts and compliance incidents — enabling reactive architectures and real-time monitoring.
Scheduled batch operations for bulk data exchange. Export audit logs, import user populations, synchronise policy updates and exchange credential status — with support for JSON, XML and CSV formats.
API security & rate limiting
OAuth 2.0 client-credentials flow for service-to-service authentication. JWT bearer tokens with configurable expiry, API-key authentication for simpler integrations, and mutual TLS support for the highest-security scenarios.
Fine-grained authorization based on OAuth 2.0 scopes and custom claims. Role-based access control for administrative operations, and attribute-based policies for complex authorization scenarios.
Configurable rate limits prevent abuse and ensure fair resource allocation. Per-client limiting with burst allowances, rate-limit headers that inform clients of current quota, and graceful degradation under load.
TLS 1.3 for all API communications with perfect forward secrecy. Certificate pinning support for mobile applications, plus request and response signing for end-to-end integrity verification.
Contact our integration team to discuss your requirements and access developer resources.