While sometimes used interchangeably, devices and credentials have separate meanings within the IdExchange system. Device is the storage mechanism that holds credentials. For example, the device is a PIV card that holds the certificates (credentials). The device can also be a mobile phone, YubiKey Token, OIT device, workstation or container where the credential is installed.
A credential is an object that is stored within a device that is used for authenticating the device holder to a relying party. The credential can be the form of an X.509 certificate, FIDO2 credential, one time password registration hash. This credential is placed on to the device.
