For Suppliers — Concert

How it works

Three steps to participation

Register your identity

Create your decentralised identity — a self-sovereign identifier you control. Start with a simple account (Azure AD B2C); graduate to federated SSO through your own corporate identity provider; ultimately hold W3C Decentralised Identifiers and Verifiable Credentials in your own digital wallet.

Maintain your credentials

Your Solid Pod holds your commercial identity: company registration, ISO certifications, insurance documents, financial statements, sustainability ratings. These are verifiable credentials issued by trusted authorities (BSI, Dun & Bradstreet, EcoVadis) — cryptographically signed and tamper-proof. You decide who sees what, for how long, and for what purpose.

Engage with buyers

When a buyer issues a procurement event through their SIGNET, you present relevant credentials. Zero-knowledge proofs let you prove "revenue exceeds £10M" without revealing actual revenue, or "ISO 27001 certified" without revealing audit scope. You submit bids through PEPPOL-standard document exchange. AI agents can assist with RFP response, pricing, and qualification — all within governed parameters.

What changes for you

Your data, your control

Today

With SIGNET

Upload the same certifications to multiple portals

Credentials stored in your Solid Pod; grant time-limited access

Pay subscription fees to platform vendors (Ariba: 5-tier pricing)

Basic participation is always free. The network effect depends on supplier density.

Your data locked in someone else's system

Your data in your Pod, under your control

No visibility into how you're evaluated

Assessment criteria published transparently per SIGNET rules

Identity progression

Three layers, one identity

Layer	When	How It Works
Centralised Account	Now	Azure AD B2C single registration. Self-service with Companies House / LEI verification. One unified Supplier ID across all connected systems.
Federated SSO	At scale	Your IT team configures a trust relationship. Your people use their corporate login. When someone leaves your company, their SIGNET access ends automatically.
Decentralised Identity	With SIGNET maturity	W3C DIDs + Verifiable Credentials. You control your identifier. Credentials in your wallet. ZKP-enabled selective disclosure. Aligned with the EU Digital Identity Wallet (eIDAS 2.0).

Register once. Be recognised everywhere.