Solving Identity Management in Modern Applications: Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0

© Yvonne Wilson, Abhishek Hingnikar  2019

Y. Wilson, A. HingnikarSolving Identity Management in Modern Applicationshttps://doi.org/10.1007/978-1-4842-5095-2_6

6. OpenID Connect

Yvonne Wilson¹  and Abhishek Hingnikar²

(1)

San Francisco, CA, USA

(2)

London, UK

 

In the social jungle of human existence, there is no feeling of being alive without a sense of identity.

—Erik Erikson, German-American developmental psychologist and psychoanalyst who coined the phrase “Identity crisis,” from Identity: Youth and Crisis (1968)

As described in the previous chapter, OAuth 2.0 provides a framework for authorizing applications to call APIs, but isn’t designed for authenticating users to applications. The OpenID Connect (OIDC)ⁱ protocol provides an identity service ...