Remove Identity Verification Credentials Safely

QCDS lets a Super User remove Global provider credentials or an authorized sender remove account-level credentials. Removal disconnects that provider profile for future use, but it does not erase the profile row, rewrite sent Requests, or delete completed Identity Verification evidence.

Check Pending Dependencies First

The Identity Verification settings show Pending bound participants for the selected provider profile. This count represents incomplete Requests whose Level 2 participants are still bound to that exact profile.

Review this number before removing credentials. A sent Request keeps its provider-profile binding even if the profile is later disabled or its credentials are removed.

Remove Credentials

  1. Open the applicable Identity Verification settings: Joomla Administrator for the Global profile, or frontend Settings for an account-level profile.
  2. Select the provider whose saved credentials you intend to remove.
  3. Click Remove Credentials and confirm the warning.

QCDS disables that provider profile, clears the stored provider credentials and provider-specific configuration needed to verify new work, resets its detected mode/health state, and keeps the stable profile record in place.

What Pending Signers See

If a participant still requires Level 2 and its bound profile no longer has usable credentials, QCDS blocks signing and reports Identity Verification Unavailable. The Level 2 requirement is not silently downgraded to ordinary signing.

Already-verified participants remain verified. A completed verification is not invalidated merely because the administrator later removes the provider credentials.

Recover a Bound Request

If credentials were removed too early, restore valid credentials to the same provider profile and test the connection again. Because QCDS retains the stable profile row, pending participants can resume using the provider profile they were originally bound to once it is usable again.

For a failed or unavailable signer attempt, the signer can use Try Identity Verification Again after the provider problem is corrected. Retry resets the attempt state for a new verification; it does not remove the Request's Level 2 requirement.

Historical Evidence Is Preserved

Removing credentials does not delete the immutable Request snapshot, Identity Verification timeline events, verified identity metadata, provider reference, verification timestamp, or completion evidence already recorded for finished transactions. Provider credentials themselves are operational secrets, not completion evidence.

Community Discussion

Want to compare workflows, share practical tips, or discuss how you use this QCDS feature? Visit the QC Digital Signature Community. For private support, bug reports, account-specific issues, or feature requests, use the QuantaCade support system.