Software Architect's Handbook

OAuth 2/OpenID Connect (OIDC)

OAuth 2 is an open standard for authorization. It allows an application to be granted access to resources from another application and share its own resources with other applications. OpenID Connect (OICD) is an identity layer that sits on top of OAuth 2. It can be used to verify the identity of an end-user. Let us take a look at how OAuth 2 and OpenID Connect work together to enable us to implement a centralized identity provider/authorization server for the purpose of handling authentication and authorization.