OpenID Connect Introduction
Understand how OpenID Connect builds on OAuth2 to provide identity layer and user authentication.
What is OpenID Connect?
Welcome to OpenID Connect! OIDC is an identity layer built on top of the OAuth2.0 protocol.
While OAuth2 is all about authorization (granting access to resources), OIDC adds the crucial element of authentication (verifying user identity).
OAuth2 vs. OIDC: The Core Difference
Think of it this way:
- OAuth2: "You can access my photos." (Authorization)
- OIDC: "You are John Doe." (Authentication)
OIDC uses OAuth2's authorization flows, but extends them to provide a standardized way for clients to verify an end-user's identity.
All lessons in this course
- OAuth2 Protocol Overview
- OpenID Connect Introduction
- Common OAuth2 Grant Types
- PKCE and Securing Public Clients