What is oidc

Last updated: April 1, 2026

Quick Answer: OpenID Connect (OIDC) is an authentication layer built on OAuth 2.0 that allows applications to verify user identity and obtain basic user information. It enables secure login through third-party providers like Google or Microsoft.

Key Facts

Overview

OpenID Connect (OIDC) is an open authentication standard that extends OAuth 2.0 to include authentication capabilities. While OAuth 2.0 focuses on authorization (granting access to resources), OIDC adds an identity layer that allows applications to verify who users are and obtain their profile information securely.

How OIDC Works

OIDC operates through a series of protocol exchanges between three parties: the user, the application (relying party), and the identity provider. When a user attempts to log in, the application redirects them to the identity provider. After authentication, the identity provider returns an ID token containing user claims and information. The application validates this token and logs the user in, typically creating a session.

Key Components

The main components of OIDC include:

Common Use Cases

OIDC is widely used for single sign-on (SSO) scenarios where users can log into multiple applications with one set of credentials. Enterprise organizations use OIDC to centralize authentication. Social login scenarios, where users sign in with Google, Microsoft, or other providers, rely on OIDC standards.

Security Features

OIDC incorporates several security measures including token signing and encryption, authorization code flow with PKCE for mobile applications, and support for multi-factor authentication. The standard defines secure token handling practices and session management guidelines.

Related Questions

What is the difference between OIDC and OAuth 2.0?

OAuth 2.0 is an authorization framework for granting access to resources, while OIDC adds authentication on top of OAuth 2.0. OIDC returns an ID token with user identity information, whereas OAuth 2.0 only handles access tokens for resource authorization.

What is an ID token in OIDC?

An ID token is a JSON Web Token (JWT) issued by the identity provider containing claims about the user's identity, such as their name, email, and subject identifier. It is cryptographically signed and allows the application to verify the user's identity.

Which companies support OIDC authentication?

Major technology companies including Google, Microsoft, Amazon, Apple, and Okta support OIDC. Most enterprise identity providers and social login platforms have adopted OIDC as their standard authentication protocol.

More What Is in Daily Life

Also in Daily Life

More "What Is" Questions

What is pjm energyWhat is rage baitWhat is rj train in germanyWhat is creatineWhat is pqwl in trainWhat is rbc in blood testWhat is queerbaitingWhat is nhl all star gameWhat is retailWhat is ewr passportWhat is edge aiWhat is the actual color of lava/magmaWhat is lx airlineWhat is usaidWhat is vsop remy martin

Trending on WhatAnswer

How Does GPS Workdifference between ai and mlHow To Start a BusinessDifference Between HTTP and HTTPSHow Does the Stock Market WorkHow To Learn ProgrammingDifference Between LLC and CorporationDifference Between Virus and BacteriaCan you increase your iqIs it safe to invest in bonds

Browse by Topic

ArtsBusinessDaily LifeEducationFoodGeographyHealthHistoryLanguageLawMathematicsNaturePoliticsPsychologyScienceSpaceSportsTechnology

Browse by Question Type

Can YouDifference BetweenDoesHow DoesHow ToIs ItWhat CausesWhat DoesWhat IsWhen WasWhere IsWho IsWhy DoWhy Is

Sources

  1. OpenID Connect Official Website CC-BY-4.0
  2. Wikipedia - OpenID CC-BY-SA-4.0