Loading vLEI.wiki
Fetching knowledge base...
Fetching knowledge base...
This comprehensive explanation has been generated from 12 GitHub source documents. All source documents are searchable here.
Last updated: October 7, 2025
This content is meant to be consumed by AI agents via MCP. Click here to get the MCP configuration.
Note: In rare cases it may contain LLM hallucinations.
For authoritative documentation, please consult the official GLEIF vLEI trainings and the ToIP Glossary.
A governance document within the GLEIF vLEI Ecosystem that establishes requirements, policies, and procedures for issuing verifiable credentials to individuals serving in official organizational roles within Legal Entities, enabling cryptographically verifiable proof of their authority and identity.
The Legal Entity Official Organizational Role (OOR) vLEI Credential Governance Framework is a controlled governance document within the GLEIF vLEI Ecosystem Governance Framework that details the requirements for vLEI Role Credentials issued to official representatives of a Legal Entity. According to Document 3, this framework specifically addresses credentials issued to individuals serving in official capacities within Legal Entities, distinguishing these from Engagement Context Role (ECR) credentials used for functional or non-official roles.
The framework is part of the broader Draft vLEI Ecosystem Governance Framework Glossary (version 0.9, February 7, 2022) and operates as a Controlled Document that establishes comprehensive policies, technical requirements, and operational procedures for the issuance, verification, and of OOR vLEI Credentials.
Implementing the OOR credential framework requires establishing processes for three distinct verification levels:
All implementations must use the standardized OOR vLEI Credential schema from the WebOfTrust GitHub repository. Custom schema extensions are not permitted, ensuring ecosystem-wide interoperability.
Implementations must support the complete credential lifecycle:
Implementations should support credential presentation and verification across multiple contexts (in-person, online, telephonic), requiring flexible presentation protocols and verification interfaces.
Successful implementation requires integration with:
Implementations must maintain compliance with:
Official Abbreviations:
The OOR vLEI Credential Governance Framework occupies a critical position in the vLEI ecosystem trust chain. According to Document 9, the ecosystem establishes a hierarchical trust chain: GLEIF → QVIs → Legal Entities → OOR Persons → ECR Persons.
The OOR credential framework sits at the fourth tier of this hierarchy:
506700GE1G29325QX363As documented in Document 9, GLEIF serves dual roles as both Governing and Administering Authority for the vLEI ecosystem, consolidating governance control while maintaining the public-private partnership model that has characterized the Global LEI System (GLEIS) since its inception following the 2008 financial crisis. The OOR credential framework operates under this consolidated authority structure.
The framework represents a significant evolution from traditional LEI systems to a cryptographically verifiable credential system built on KERI infrastructure using Authentic Chained Data Container (ACDC) credentials. This technical foundation enables the OOR credentials to provide cryptographically verifiable proof of an individual's authority to act on behalf of a Legal Entity.
The OOR framework interacts with several key governance entities:
According to Document 4, the OOR vLEI Credential enables simple, safe, secure identification of individuals holding official organizational roles to any verifier accepting such credentials. The framework scope is explicitly limited to three stakeholder categories:
Only Qualified vLEI Issuers (QVIs) contracted by Legal Entities holding valid Legal Entity vLEI Credentials may issue OOR vLEI Credentials. As specified in Document 4, the issuance process requires:
Individuals receiving OOR vLEI Credentials must:
Entities accepting OOR vLEI Credentials must:
As established in Document 4, the framework establishes a foundational principle of strong cryptographic binding to the OOR vLEI Credential Holder. This binding enables proof requests to be satisfied through verification against:
This ensures non-repudiable attribution of the credential to its rightful holder, meaning the holder cannot deny their association with the credential or actions taken using it.
The OOR credential functions across diverse verification contexts including:
This universal applicability ensures consistent identity verification regardless of interaction modality, a critical feature for global business operations.
The OOR credential framework has specific limitations:
Official Roles Only: The framework explicitly covers only official organizational roles, not functional or engagement context roles (which are covered by the ECR framework)
Legal Entity Dependency: OOR credentials can only be issued to individuals representing Legal Entities that hold valid Legal Entity vLEI Credentials
QVI Mediation: All OOR credential issuance must be mediated by a contracted QVI; Legal Entities cannot issue OOR credentials directly
Schema Compliance: All OOR credentials must conform to the standardized schema; custom credential structures are not permitted
According to Document 4, the framework mandates a sophisticated three-tiered identity verification approach:
QVI Authorized Representatives (QARs) must verify:
Notably, identity authentication is not required at the Legal Entity level for OOR credential issuance, as the Legal Entity's identity is already established through its Legal Entity vLEI Credential.
LAR identity assurance and authentication requirements are inherited from the Legal Entity vLEI Credential Governance Framework, maintaining consistency across the credential hierarchy. The LAR is the individual authorized by the Legal Entity to request OOR credential issuance.
This is the most critical verification level for OOR credentials. The QAR must:
Verification of OOR vLEI Credentials involves multiple cryptographic checks:
OOR vLEI Credentials may be revoked under several conditions:
Revocation is recorded in the credential's Transaction Event Log (TEL), which is anchored to the issuing QVI's Key Event Log (KEL), ensuring the revocation is cryptographically verifiable and cannot be undone.
As documented in Document 9, the OOR credential framework is fundamentally built on KERI (Key Event Receipt Infrastructure) technology, representing a significant architectural shift from traditional PKI-based systems to self-sovereign identity infrastructure.
Key technical elements include:
The system utilizes Autonomic Identifiers (AIDs) as the foundation for cryptographic identity. All vLEI issuers must verify AID control by holders. This represents a move from administratively assigned identifiers to cryptographically self-certifying identifiers that provide:
OOR credentials are implemented as Authentic Chained Data Containers (ACDCs), which provide:
As specified in Document 4, all OOR vLEI Credentials must use the standardized OOR vLEI Credential schema defined in the WebOfTrust GitHub repository. This schema defines:
The schema ensures interoperability across the vLEI ecosystem, allowing any compliant verifier to process OOR credentials from any QVI.
The OOR credential framework operates under the vLEI Ecosystem Governance Framework v3.0, which serves as the master governance document for the entire vLEI ecosystem. As documented in Document 9, this framework:
The OOR framework is one of four interconnected credential governance frameworks:
Qualified vLEI Issuer vLEI Credential Governance Framework: Defines requirements for credentials issued by GLEIF to QVIs, enabling them to issue, verify, and revoke downstream credentials. (Document 10, Document 11)
Legal Entity vLEI Credential Governance Framework: Details requirements for vLEI credentials issued by QVIs to Legal Entities
Legal Entity Official Organizational Role vLEI Credential Governance Framework: This framework (the subject of this document)
Legal Entity Engagement Context Role vLEI Credential Governance Framework: Details requirements for credentials issued to individuals in non-official functional or engagement context roles (Document 5)
The OOR framework references several technical specifications:
Additional policy documents that govern OOR credential operations include:
The OOR vLEI Credential Governance Framework enables several critical use cases:
OOR credentials allow individuals to cryptographically prove they are authorized to represent a Legal Entity in official capacities, such as:
The framework supports regulatory compliance by providing:
The context-independent nature of OOR credentials enables:
OOR credentials enable digital transformation initiatives by:
The Legal Entity Official Organizational Role vLEI Credential Governance Framework represents a sophisticated governance structure that bridges traditional legal entity identification (through LEIs) with modern cryptographic identity infrastructure (through KERI). By establishing clear roles, responsibilities, and technical requirements, the framework enables a global ecosystem of verifiable organizational credentials that provide strong cryptographic assurance while maintaining the flexibility needed for diverse business contexts.
The framework's integration with the broader vLEI ecosystem, its foundation on KERI infrastructure, and its comprehensive approach to identity verification and credential lifecycle management position it as a critical component of the emerging verifiable credential landscape for organizational identity.