# Terminology and Concepts

**Self‑Sovereign Identity (SSI)** User‑centric identity where control of identifiers and credentials belongs to the subject.

**Decentralized Identifier (DID)** A globally unique identifier. Wallet Server supports:

* `did:empe` (mainnet)
* `did:empe:testnet` (testnet)
* `did:web` (hosted over HTTPS)

**DID Document** The document resolved from a DID containing verification methods, services, and controller info.

**Verifiable Credential (VC)** A cryptographically signed credential asserting claims about a subject.

**Claim Flow** The process a holder uses to claim a credential from an issuer, typically initiated by scanning an issuer QR.

**Presentation Flow** The process a holder uses to present one or more credentials to a verifier, typically initiated by scanning a verifier QR.

**did:web** A DID method where the DID document is hosted at a well‑known HTTPS path on a domain you control.

**Tenant Scoping** Wallet data is partitioned by the JWT `sub`. Each request is evaluated in the context of the authenticated user.