Authoritative Source
Identity attributes come from source-controlled integrations where confirmed.
VIETNAM · CHECKID
VNeID
Use VNeID in eID/SSO/ShareInfo journeys where integration is confirmed.
PURPOSEScenario-specific
CONTROLSource · policy · standard
OUTCOMEDecision · evidence
VIETNAM DIGITAL IDENTITY
VNeID
Use VNeID in eID/SSO/ShareInfo journeys where integration is confirmed.
Consent / Federation
SSO / ShareInfo patterns are separated from verification evidence.
RAR/C06 fabric
Source → CheckID → RP
↗SOURCE-BOUND REFERENCE
VNeID in CheckID: authentication, authorization and ShareInfo are different layers
Source → Scope → Evidence → Limitation
Authentication
VNeID can act as an electronic-identity/authentication channel in an authorized journey. CheckID does not present VNeID as a database owned by CheckID.
Authorization and consent
A successful sign-in does not automatically authorize a relying party to receive every identity attribute. Authorization/consent and purpose remain service-scope controls.
ShareInfo
ShareInfo is described as an authorized attribute-sharing step where the service/source permits it; it is distinct from SSO/session establishment.
Provenance
Attributes received from an authoritative/VNeID ecosystem retain provenance so they can be distinguished from OCR/document-derived or user-declared data.
Failure
User denial/cancellation, invalid session/token, source unavailable or out-of-scope authorization are distinct integration outcomes and are not automatically identity mismatch.
Boundary
No private endpoint, credential, citizen data or claim of unrestricted national-database access is published.