Skip to content

Commit c1c3999

Browse files
committed
adding a mention about the link domain update
1 parent 5d44303 commit c1c3999

File tree

2 files changed

+18
-14
lines changed

2 files changed

+18
-14
lines changed

articles/active-directory/verifiable-credentials/how-to-dnsbind.md

Lines changed: 12 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ manager: karenhoran
77
ms.service: active-directory
88
ms.topic: how-to
99
ms.subservice: verifiable-credentials
10-
ms.date: 02/17/2022
10+
ms.date: 02/22/2022
1111
ms.author: barclayn
1212

1313
#Customer intent: Why are we doing this?
@@ -17,7 +17,7 @@ ms.author: barclayn
1717

1818
> [!IMPORTANT]
1919
> Azure Active Directory Verifiable Credentials is currently in public preview.
20-
> This preview version is provided without a service level agreement, and it's not recommended for production workloads. Certain features might not be supported or might have constrained capabilities.
20+
> This preview version is provided without a service level agreement, and it's not recommended for production workloads. Certain features might not be supported or might have constrained capabilities.
2121
> For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
2222
2323

@@ -35,7 +35,7 @@ Linking a DID to a domain solves the initial trust problem by allowing any entit
3535

3636
## When do we need to manage linked domains?
3737

38-
Any situation that requires the domain associated with your company to change, like a company merger or a company rename, may mean that you need to manage your linked domain. In either one of these cases, you would make changes to your domain list through the Azure AD Portal and those changes would be published in the greater Decentralized Network.
38+
Any situation that requires the domain associated with your company to change, like a company merger or a company rename, may mean that you need to manage your linked domain. Before, In either one of these situations would have required for you to opt out and back in. You no longer need to [opt out](how-to-opt-out.md) to make changes to your domain information. You can make changes to your domain through the Azure AD Portal. After you publish your changes, those changes are published to the ION network.
3939

4040
## How do we link DIDs and domains?
4141

@@ -97,7 +97,7 @@ If all of the previously mentioned are true, then Microsoft Authenticator displa
9797

9898
## Unverified domain
9999

100-
If any of the above aren't true, the Microsoft Authenticator will display a full page warning to the user that the domain is unverified, the user is in the middle of a risky transaction and they should proceed with caution. We have chosen to take this route because:
100+
If any of the above aren't true, Microsoft Authenticator displays a full page warning to the user that the domain is unverified. The user is warned that they are in the middle of a risky transaction and they should proceed with caution. We have chosen to take this route because:
101101

102102
* The DID is either not anchored to a domain.
103103
* The configuration wasn't set up properly.
@@ -110,7 +110,7 @@ It is of high importance that you link your DID to a domain recognizable to the
110110
## How do you change a linked domain?
111111

112112
1. Navigate to the Verifiable Credentials | Getting Started page.
113-
1. One the left side of the page select **Domain**.
113+
1. On the left side of the page select **Domain**.
114114
1. In the Domain box, enter your new domain name.
115115
1. Choose **Publish**.
116116

@@ -122,6 +122,11 @@ It is of high importance that you link your DID to a domain recognizable to the
122122

123123
:::image type="content" source="media/how-to-dnsbind/verification.png" alt-text="You need to verify your domain once that the publishing process completes":::
124124

125+
126+
>[!IMPORTANT]
127+
> No changes to the domain are possible before the changes are confirmed as published and live in the [ION network](https://identity.foundation/ion/).
128+
129+
125130
### Do I need to wait for my DID Doc to be updated to verify my newly added domains?
126131

127132
Yes. You need to wait until the config.json file gets updated before you publish it using your domain's hosting location.
@@ -135,9 +140,7 @@ Today, we're unable to tel you exactly when your domain link change will complet
135140

136141
## Distribute well-known config
137142

138-
1. Navigate to the Settings page in Verifiable Credentials and choose **Verify this domain**
139-
140-
![Verify this domain in settings](media/how-to-dnsbind/settings-verify.png)
143+
1. From the Azure portal, navigate to the Verifiable Credentials page. Select **Domain** and choose **Verify this domain**
141144

142145
2. Download the did-configuration.json file shown in the image below.
143146

@@ -158,4 +161,4 @@ Congratulations, you now have bootstrapped the web of trust with your DID!
158161

159162
## Next steps
160163

161-
If during onboarding you enter the wrong domain information or if you decide to change it, you will need to [opt out](how-to-opt-out.md). At this time, we don't support updating your DID document. Opting out and opting back in will create a brand new DID.
164+
- [How to customize your Azure Active Directory Verifiable Credentials](credential-design.md)

articles/active-directory/verifiable-credentials/whats-new.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ manager: karenhoran
66
ms.service: active-directory
77
ms.subservice: verifiable-credentials
88
ms.topic: reference
9-
ms.date: 02/11/2022
9+
ms.date: 02/22/2022
1010
ms.custom: references_regions
1111
ms.author: barclayn
1212

@@ -20,11 +20,12 @@ This article lists the latest features, improvements, and changes in the Azure A
2020

2121
## February 2022
2222

23-
We are rolling out some important updates to our service that are breaking changes and require Azure AD Verifiable Credentials service reconfiguration and re-issuance of verifiable credentials for end-users.
23+
We are rolling out some important updates to our service. These are breaking changes and require Azure AD Verifiable Credentials service reconfiguration. End-users need to have their verifiable credentials reissued.
2424

2525
- The Azure AD Verifiable Credentials service can now store and handle data processing in the Azure European region. [More information](whats-new.md?#azure-ad-verifiable-credentials-available-in-europe)
26-
- Azure AD Verifiable Credentials customers can take advantage of enhancements to credential revocation that add a higher degree of privacy through the implementation of the [W3C Status List 2021](https://w3c-ccg.github.io/vc-status-list-2021/) standard. [More information](whats-new.md?#credential-revocation-with-enhanced-privacy)
27-
- We made protocol updates in Microsoft Authenticator in the interaction between the Issuer of a verifiable credential and the user preenting the verifiable credential. This update will force all Verifiable Crecentials to be re-issued in Microsoft Authenticator for Android. [More information](whats-new.md?#microsoft-authenticator-android-did-generation-update)
26+
- Azure AD Verifiable Credentials customers can take advantage of enhancements to credential revocation. These changes add a higher degree of privacy through the implementation of the [W3C Status List 2021](https://w3c-ccg.github.io/vc-status-list-2021/) standard. [More information](whats-new.md?#credential-revocation-with-enhanced-privacy)
27+
- Azure AD Verifiable Credentials customers can now change the [domain linked](how-to-dnsbind.md) to their DID without having to opt-out and opt back in.
28+
- We made protocol updates in Microsoft Authenticator in the interaction between the Issuer of a verifiable credential and the user presenting the verifiable credential. This update will force all Verifiable Credentials to be reissued in Microsoft Authenticator for Android. [More information](whats-new.md?#microsoft-authenticator-android-did-generation-update)
2829

2930
>[!IMPORTANT]
3031
> All Azure AD Verifiable Credential customers receiving a banner notice in the Azure portal need to go through a service reconfiguration before March 31st 2022. On March 31st 2022 tenants that have not been reconfigured will lose access to any previous configuration. Administrators will have to set up a new instance of the Azure AD Verifiable Credential service. Learn more about how to [reconfigure your tenant](verifiable-credentials-faq.md?#how-do-i-reconfigure-the-azure-ad-verifiable-credentials-service).
@@ -99,7 +100,7 @@ Sample contract file:
99100
100101
### Microsoft Authenticator Android DID Generation Update
101102

102-
We are making protocol updates in Microsoft Authenticator to support Single Long Form DID, thus deprecating the use of pairwise. With this update your DID in Microsoft Authenticator will be used of every issuer and relaying party exchange. Holders of verifiable crendentials in Microsoft Authenticator for Android must get their verifiable credentials re-issued as any previous credentials are not going to continue working.
103+
We are making protocol updates in Microsoft Authenticator to support Single Long Form DID, thus deprecating the use of pairwise. With this update, your DID in Microsoft Authenticator will be used of every issuer and relaying party exchange. Holders of verifiable credentials in Microsoft Authenticator for Android must get their verifiable credentials reissued as any previous credentials aren't going to continue working.
103104

104105
## December 2021
105106

0 commit comments

Comments
 (0)