OpenID Connect (OIDC) is an authentication layer built on top of OAuth 2.0, specifically designed for web and mobile applications. It provides identity verification through JSON Web Tokens (JWT), enabling users to interact with an authorization server to obtain an ID token that contains essential user information. The flow supports both user login and API access.
Type: Identity Layer on top of OAuth 2.0
Purpose: Provides authentication and authorization in a single, simple protocol.
Flow:
-
User initiates authentication with the client application.
-
Redirected to the identity provider (IdP) to log in.
-
Upon successful login, the IdP provides an ID token, which the application uses to confirm the user's identity.
Use Cases: Used in web and mobile applications for user authentication, especially in scenarios that require both authentication and authorization.
Integration: Provides more user information via ID tokens and supports various types of client applications.
Free
7×24
Remark
The application owner needs to manage access control through the returned attributes.