OpenID Connect Integration

Standard Flow

The OpenID Connect protocol, in abstract, follows the following steps.

  • The RP (Client) sends a request to the OpenID Provider (OP).
  • The OP authenticates the End-User and obtains authorization.
  • The OP responds with an ID Token and usually an Access Token.
  • The RP can send a request with the Access Token to the UserInfo Endpoint.
  • The UserInfo Endpoint returns Claims about the End-User.

OIDC Flow

Figure 1. OpenID Connect Protocol