Electronic Signatures and Trust Infrastructures (ESI); Profiles for Electronic Attestation of Attributes; Part 2: Profiles for EAA/PID Presentations to Relying Party

Verified on 2026-10-29

(title available in French only)

Official Binding

Reference
ETSI TS 119 472-2 V1.2.1
Type
ETSI standard
Folder
ETSI standards
Version
V1.2.1
Date
2026-03
Status
Final
Languages
English
Official source
https://www.etsi.org/deliver/etsi_ts/119400_119499/11947202/01.02.01_60/ts_11947202v010201p.pdf

Note

ETSI technical specification, part 2, specifying attestation presentation realisations (SD-JWT VC, mdoc, JSON-LD) and two protocol profiles for requests by relying parties (version 1.2.1).

The full text is not reproduced here (copyright): see the official source.

Summary

Purpose

Technical specification ETSI TS 119 472-2 (version 1.2.1, March 2026) defines how a relying party requests attestations or person identification data (PID) from the European Digital Identity Wallet, and how the wallet presents them to it

ETSI TS 119 472-2 V1.2.1, § 1 Scope

ETSI TS 119 472-2 V1.2.1, History. It first describes implementations of the presentation of an attestation (EAAP), based on the formats of part 1:

Official text · ETSI TS 119 472-2 V1.2.1, § 1 Scope

Specifies three (3) realizations for Presentations of Electronic Attestation of Attributes (EAAP hereinafter)

These implementations are SD-JWT VC, ISO/IEC-mdoc and JSON-LD W3C VC. The specification then defines two protocol profiles: a profile based on ISO/IEC 18013-5 (clause 5) and a profile based on OpenID4VC-HAIP, itself based on OpenID4VP (clause 6) ETSI TS 119 472-2 V1.2.1, § 1 Scope.

Who it applies to

  • Wallet providers, who ensure that their solutions support the presentation of attributes to relying parties, remotely and, where applicable, in proximity, according to Annex II to Implementing Regulation 2024/2982 Art. 5(1).
  • The requirements of the annex also target, as the case may be, relying parties, PID providers and attestation providers Annex II.

Key points

What the implementing act applies, and how

Annex II to Implementing Regulation 2024/2982 makes paragraphs 4.1, 4.2, 5 and 6 of the specification version 1.2.1 applicable, subject to adaptations, including the insertion of a new paragraph 4.3 Annex II. This annex was added by Implementing Regulation 2026/1731, which deleted the original single annex Art. 4.

  • Not targeted: Annex A (JSON-LD W3C VC) and Annexes C and D are not in the list of applicable paragraphs Annex II.
  • Mediating API: the new paragraph 4.3 requires the wallet to have a mediating API that accepts both protocols defined in section 5.2 of HAIP and in Annex C of ISO/IEC 18013-7; the ISO/IEC-mdoc profile extends to this transmission (new paragraph 5.4) Annex II.
  • Checking requests: a paragraph 4.4 obliges the wallet to validate the relying party’s registration certificate and to compare the attributes requested with those registered in it; the wallet provider determines, on the basis of its risk analysis and security policy, whether and under what conditions the user may override a failed validation check; in the event of an excessive request, it also determines, according to applicable law, whether the user may continue, whether only the subset covered by the certificate may be disclosed, or whether the request must be rejected Annex II. Moreover, the article of the Regulation that obliges wallet providers to have the registration certificate authenticated and validated by wallet units applies only from 11 August 2028 Art. 3(4) Art. 8.
  • Emptied or rewritten requirements: many requirements are emptied, others are rewritten, for example the verification of physical proximity in cross-device flows Annex II. Unmodified requirements remain applicable, such as the one requiring browsers and operating systems to support the short-range CTAP transport bindings ETSI TS 119 472-2 V1.2.1, § 6.5.2 Additional requirements.
  • Regime: it is an obligation to support, laid down by the article cited above, which targets wallet providers Art. 5(1).

Cited version

Annex II to Implementing Regulation 2024/2982 names version 1.2.1 (2026-03) of TS 119 472-2 Annex II. The index of ETSI standards in the corpus, consulted on 31-10-2026, mentions a more recent published version, V1.3.1, whose text is not in the corpus. In addition, TS 119 472-2 cites CTAP in a Review Draft of 21 March 2023 (reference [13]) ETSI TS 119 472-2 V1.2.1, § 2.1 Normative references, which the annex does not replace: it only adds other normative references Annex II. The corpus contains CTAP 2.3 CTAP 2.3, which the annex names only in notes Annex II.

Error in the act

Annex II refers to Annex C of the following standard:

Official text · Implementing Regulation (EU) 2024/2982 — consolidated version of 11/08/2026, Annex II

ISO/IEC 18013-7:2025

The document published by ISO is a technical specification, referenced ISO/IEC TS 18013-7:2025 ISO/IEC TS 18013-7:2025. Probable reading: ISO/IEC TS 18013-7:2025. In addition, in the French version only, the adaptation that rewrites requirements of clause 6.5.2 heads it 6.5.2 General requirements; the English version, correctly, reads 6.5.2 Additional requirements, which is the heading of this clause in V1.2.1 ETSI TS 119 472-2 V1.2.1, § 6.5.2 Additional requirements.

Important clauses

Consolidation without official value

This summary relies on the consolidated version, published on EUR-Lex, of Implementing Regulation 2024/2982 Implementing Regulation (EU) 2024/2982 — consolidated version of 11/08/2026. It serves as documentation: only the text published in the Official Journal is authentic.

ETSI standard: the site reproduces only short extracts; the full text is available from ETSI ETSI TS 119 472-2 V1.2.1. Written by Asphalia.