Jump to content

OpenID Connect

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by 78.45.222.80 (talk) at 09:12, 29 November 2019. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

OpenID Connect (OIDC) is an authentication layer on top of OAuth 2.0, an authorization framework.[1] The standard is controlled by the OpenID Foundation.

Description

OpenID Connect is a simple identity layer on top of the OAuth 2.0 protocol, which allows computing clients to verify the identity of an end-user based on the authentication performed by an authorization server, as well as to obtain basic profile information about the end-user in an interoperable and REST-like manner. In technical terms, OpenID Connect specifies a RESTful HTTP API, using JSON as a data format.

OpenID Connect allows a range of clients, including Web-based, mobile, and JavaScript clients, to request and receive information about authenticated sessions and end-users. The specification suite is extensible, supporting optional features such as encryption of identity data, discovery of OpenID Providers, and session management.[1]

Open source providers

There are several open source implementations of OpenID Connect providers, including:

See also

References

  1. ^ a b "OpenID Connect". OpenID Foundation. Retrieved 2016-04-18.
  2. ^ "An OpenID Connect reference implementation in Java on the Spring platform.: mitreid-connect/OpenID-Connect-Java-Spring-Server". July 2, 2019 – via GitHub.
  3. ^ "OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors: dexidp/dex". July 5, 2019 – via GitHub.
  4. ^ "Ipsilon". ipsilon-project.org.
  5. ^ "IdentityServer4". July 18, 2019.
  6. ^ "oidc-provider". Nov 29, 2019 – via GitHub.