What do the authentication service, the credential service and the authorisation service do?

The authentication service is the core of the verifier and compares presented authentication means with stored credentials to establish whether the subject owns the claimed digital identity; the credential service issues and manages authentication means, including user-friendly renewal and replacement; the authorisation service checks at runtime that the rights for using a digital resource are met and grants use if they are.

The authorisation service is also called access service; it applies the rules maintained by the access-rights service.