---
title: Revoking a credential
description: "You can revoke a credential in PingOne if it's no longer valid."
component: pingone
page_id: pingone:digital_credentials_using_pingone_credentials:p1_credentials_revoking_a_credential
canonical_url: https://docs.pingidentity.com/pingone/digital_credentials_using_pingone_credentials/p1_credentials_revoking_a_credential.html
revdate: June 2, 2025
section_ids:
  steps: Steps
  choose-from: Choose from:
  result: Result
---

# Revoking a credential

You can revoke a credential if it's no longer valid and should be removed.

To revoke a credential, you change the issuance rule or SCIM filter. You can either remove or change the group, population, or custom filter so that the user doesn't match anymore. You can also revoke a credential from a user in the **Users** page. Learn more in [Managing a user's credentials](../directory/p1_manage_user_credentials.html).

|   |                                                   |
| - | ------------------------------------------------- |
|   | You can only delete a credential through the API. |

To revoke credentials in PingOne Credentials:

## Steps

1. In the PingOne admin console, go to **Digital Credentials > Schemas**.

2. Click the relevant credential to open the details panel.

3. In the **Population**, **Group**, or **Custom** tab, click the **Pencil** icon ([icon: pencil, set=fa])

   ### Choose from:

   * Select **Populations** and in the **Selected Populations** tab, click the population to revoke credentials.

   * Select **Groups** and in the **Selected Groups** tab, click the group to revoke credentials.

   * Select **Custom** and delete or edit conditions as needed to revoke permissions based on different criteria.

4. Click **Update**.

## Result

Credentials for users no longer meeting the criteria are revoked.