Jump to content

OpenID Connect

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Splinter (talk | contribs) at 08:52, 1 July 2014. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

OpenID Connect (OIDC) is an authentication layer on top of OAuth.

Description

OpenID Connect is a simple identity layer on top of the OAuth 2.0 protocol, which allows computing clients to verify the identity of an end-user based on the authentication performed by an authorization server, as well as to obtain basic profile information about the end-user in an interoperable and REST-like manner. The term REST-like manner indicates that the software architectural style within the distributed hypermedia system adheres to a coordinated set of architectural constraints applied to the components, connectors, and data elements. In technical terms, OpenID Connect specifies a RESTful HTTP API, using JSON as a data format.

OpenID Connect allows a range of clients, including Web-based, mobile, and JavaScript clients, to request and receive information about authenticated sessions and end-users. The specification suite is extensible, supporting optional features such as encryption of identity data, discovery of OpenID Providers, and session management.[1]

Adoption

Companies that have started to use OpenID Connect include Google, Microsoft, Deutsche Telekom, salesforce.com, and the Nomura Research Institute.[2]

See also

References

  1. ^ "Welcome to OpenID Connect". OpenID.net. Retrieved 2013-05-28.
  2. ^ "The OpenID Foundation Launches the OpenID Connect Standard".