Securing the Perimeter: Deploying Identity and Access Management with Free Open Source Software

© Michael Schwartz, Maciej Machulak 2018

Michael Schwartz and Maciej MachulakSecuring the Perimeterhttps://doi.org/10.1007/978-1-4842-2601-8_5

5. OpenID Connect

Michael Schwartz¹  and Maciej Machulak²

(1)

Austin, TX, USA

(2)

London, UK

 

Despite OAuth’s close association with authentication, if you want to use it for web or mobile login, you’ll should use OpenID Connect. Both a profile and extension of OAuth, OpenID Connect defines some of the features necessary to use OAuth for federated identity.

Note

To save space, sometimes “OpenID Connect” is shortened to simply “Connect”. “OpenID” would not be specific enough, because there are several OpenID working groups with product standards.

OpenID Connect was formulated at a time when Google, Microsoft, Facebook, ...