← Back to glossary
🪪

OpenID Connect (OIDC)

Authentication

Single Sign‑On (SSO) Identity Provider (IdP) OAuth 2.0 JSON Web Token (JWT)

Identity layer on OAuth 2.0 providing authentication via ID tokens (typically JWT) from an IdP.

Definition

OpenID Connect adds authentication to OAuth 2.0. The identity provider issues an ID token (often a JWT) that proves who the user is, plus access tokens for APIs when needed.

In plain English Identity layer on OAuth 2.0 providing authentication via ID tokens (typically JWT) from an IdP.

Why this matters

Why it matters: Standardized login flows reduce custom auth mistakes; poor validation of tokens or redirect URIs can lead to impersonation.

Example

Example: The relying party validates issuer, audience, signature, nonce, and token expiry before creating a session.