Topic starter
04/06/2026 6:48 pm
TL;DR: The governance question is no longer whether wallets work in principle, but whether regulated identity controls, assurance, and acceptance rules are ready for production use, as OneSpan says it is participating in the WE BUILD and Aptitude European Digital Identity Wallet large-scale pilots, which are testing real-world use cases for banking, payments, travel credentials, and cross-border identity flows under eIDAS 2.0 and AMLR.
Editorial analysis by NHI Mgmt Group, based on content published by OneSpan: “OneSpan joins digital identity wallet pilots: WE BUILD and Aptitude”.
Key questions
Q: How should organisations decide when to accept an EUDI wallet claim?
A: Organisations should define acceptance criteria for each use case, including assurance level, attribute freshness, transaction context, and relying-party verification.
Q: Why do EUDI wallet pilots matter for customer due diligence?
A: They test whether verified identity data can be reused for onboarding without losing assurance or auditability.
Q: What breaks if wallet-based strong customer authentication is not tightly governed?
A: If wallet-based SCA is loosely defined, organisations can end up accepting a possession factor without confirming the transaction context, relying party, or evidence trail.
Practitioner guidance
- Map wallet acceptance points Identify every onboarding, login, and payment flow where an EUDI wallet could replace or supplement current identity checks, then assign an explicit acceptance rule for each one.
- Separate CDD from SCA testing Validate customer due diligence and strong customer authentication as distinct control paths, because each relies on different assurance expectations, evidence, and failure modes.
- Define relying-party trust criteria Document what identity data, assurance level, and transaction context are required before the organisation will accept a wallet assertion in production.
Bottom line: EUDI wallet pilots are testing whether digital identity can be accepted as a governed trust source across banking, payments, and cross-border use cases.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
04/06/2026 7:00 pm
EUDI wallet governance will be decided by acceptance rules, not by wallet availability. The practical challenge is whether relying parties can decide when a wallet assertion is sufficient for onboarding, authentication, or transaction approval. That decision layer becomes the new control surface for digital trust in Europe. IAM teams should treat acceptance logic as a governance asset, not a user experience detail.
A question worth separating out:
Q: What is the difference between wallet acceptance and identity proofing?
A: Identity proofing establishes who the subject is and how that identity was verified, while wallet acceptance determines whether a relying party will trust the wallet’s assertion for a specific use case. They are related but not interchangeable, and confusing them leads to over-trusting portable credentials.
👉 Read our full editorial: EUDI wallet pilots shift digital identity governance in Europe