{
  "name": "internet-identity-attributes",
  "title": "Internet Identity Attributes",
  "category": "Auth",
  "description": "Trust a signed-in user's verified email, display name or organization SSO domain in a canister, rather than only their principal. Internet Identity signs an attribute bundle alongside the delegation, and the backend verifies the signer, the frontend origin and a nonce it issued itself before believing any of it. Use when a canister must know something about the caller beyond their principal, when gating access or an allowlist on an address the user provably controls, when showing a name the user never typed into your app, or when the backend rejects a bundle the frontend has just obtained. Covers the frontend request, scoping attributes to the account signed in with, and the identity-attributes library for Motoko and Rust. Assumes sign-in already works: load internet-identity first. Do NOT use for the sign-in flow itself, for an email address the user typed in (that is ordinary app input, which II has not checked), or for an agent or CLI acting as a user (agent-web-identity).",
  "license": "Apache-2.0",
  "compatibility": "moc >= 1.6.0, ic-cdk >= 0.20.1",
  "updated": "2026-11-06T11:13:33.000Z",
  "urls": {
    "html": "https://skills.internetcomputer.org/skills/internet-identity-attributes/",
    "markdown": "https://skills.internetcomputer.org/.well-known/skills/internet-identity-attributes/SKILL.md",
    "json": "https://skills.internetcomputer.org/api/skills/internet-identity-attributes.json",
    "source": "https://github.com/dfinity/icskills/blob/5b70e9d86495af101c8d683fafb2bdfad7d2a578/skills/internet-identity-attributes/SKILL.md"
  },
  "publisher": {
    "name": "DFINITY Foundation",
    "url": "https://dfinity.org"
  },
  "canonicalRepo": {
    "name": "dfinity/icskills",
    "url": "https://github.com/dfinity/icskills"
  }
}