-
An Illustrated Guide to OAuth and OpenID Connect
OAuth 2.0 and OpenID Connect (OIDC) are internet standards that enable one application to access data from another. Unfortunately, these standards use a lot of jargon and terminology that make them more difficult to understand. The goal of this video is to explain how these standards work using simplified illustrations.
Check out our new video course! The Nuts and Bolts of OAuth 2.0
https://oauth2simplified.com/course
If you'd prefer to read a post on this subject, or find related posts that dive deeper into OAuth and OIDC, go to https://developer.okta.com/blog/2019/10/21/illustrated-guide-to-oauth-and-oidc
Okta is a developer API service that stores user accounts for your web apps, mobile apps, and APIs.
* Sign up for Okta for free at https://developer.okta.com/signup/
* For more info...
published: 05 Nov 2019
-
SAML vs. OpenID (OIDC): What's the Difference?
In this video, learn the differences between Security Assertion Markup Language (SAML 2.0) and OIDC, which is built on the OAuth 2.0 framework. Read the full post: https://jumpcloud.com/blog/saml-vs-openid
Learn more about SSO with JumpCloud: https://jumpcloud.com/platform/single-sign-on?utm_source=youtube-organic&utm_medium=referral&utm_content=saml-vs-openid
Try JumpCloud for free: https://jumpcloud.com/signup?utm_source=youtube-organic&utm_medium=referral&utm_content=saml-vs-openid
Resources and social media:
-Blog: https://jumpcloud.com/blog?utm_source=youtube-organic&utm_medium=referral&utm_content=saml-vs-openid
-Community: https://community.jumpcloud.com/
-Facebook: https://www.facebook.com/JumpCloud.DaaS/
-Twitter: https://twitter.com/JumpCloud
-LinkedIn: https://www.linkedin.co...
published: 23 May 2023
-
OAuth 2.0 & OpenID Connect (OIDC): Technical Overview
This video explains the basics of the OAuth 2.0 & OpenID Connect (OIDC) protocol, focusing on what an IT administrator must know.
VMware End-User Computing (EUC) solutions empower the digital workspace by simplifying app & access management, unifying endpoint management & transforming Windows delivery. Learn more on the Digital Workspace Tech Zone: https://techzone.vmware.com.
published: 23 Sep 2020
-
What is OpenID Connect?
The federation space is quickly changing, and successful business adapt quickly to the newest technology. OpenID Connect is a key example of the newest in technology. This video highlights the value of using Okta to implement OpenID Connect into your application, not only for your customers, but for your B2B partners as well.
published: 18 Jun 2019
-
OAuth 2.0 and OpenID Connect (in plain English)
Developer Advocate Nate Barbettini breaks down OpenID and OAuth 2.0 in Plain English. NOTE: This video is from 2018 and contains some information that is now out of date, mainly the content around the OAuth Implicit Flow.
Check out our video course! The Nuts and Bolts of OAuth 2.0 https://oauth2simplified.com/course
Learn more about OAuth at https://oauth.net
Get the book: OAuth 2.0 Simplified https://amzn.to/36HAGoS
Find Nate's slides here: https://speakerdeck.com/nbarbettini/oauth-and-openid-connect-in-plain-english
Sign up for our newsletter! https://a0.to/zeroindex
published: 05 Feb 2018
-
Openid Connect Authentication
#AzureAD #OpenidConnect #Authentication #MicrosoftGraph #Protocol
OpenidConnect Protocol
Authentication Flow
Oauth 2.0 VS OpenidConnect Protocol
How does Openid Connect Authentication flow works with Azure Active Directory ?
Microsoft Article - https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
Oauth playlist - https://www.youtube.com/playlist?list=PL8wOlV8Hv3o-a7GMEh5iZF21rD9nKtc7d
SAAS - https://www.youtube.com/playlist?list=PL8wOlV8Hv3o8sAPfpO16njVxVUcuCTJU7
Regards,
ConceptsWork
published: 17 May 2020
-
ID Tokens VS Access Tokens: What's the Difference?
ID Tokens vs Access Tokens. What are they and when do you use them? How do they differ? Where do they come from? We'll briefly cover OAuth 2.0 and OpenID Connect and the difference between Authentication and Authorization.
Grab the FREE Cheat Sheet from the Auth0 by Okta blog post -
https://auth0.com/blog/id-token-access-token-what-is-the-difference/
Sign up for our monthly newsletter! https://a0.to/zeroindex
#authentication #developer #tokens #login
___________________________________________
Learn with Auth0 by Okta
Try for free - https://a0.to/auth0
The Auth0 by Okta blog - https://a0.to/blog
Ask questions on the Community Forum - https://a0.to/community ___________________________________________
Follow Us on Social
Twitter - https://twitter.com/oktadev
LinkedIn - https://www....
published: 09 Jan 2023
-
OAuth 2 Explained In Simple Terms
Get a Free System Design PDF with 158 pages by subscribing to our weekly newsletter: https://bytebytego.ck.page/subscribe
Animation tools: Adobe Illustrator and After Effects.
Checkout our bestselling System Design Interview books:
Volume 1: https://amzn.to/3Ou7gkd
Volume 2: https://amzn.to/3HqGozy
The digital version of System Design Interview books: https://bit.ly/3mlDSk9
ABOUT US:
Covering topics and trends in large-scale system design, from the authors of the best-selling System Design Interview series.
published: 29 Jun 2023
-
OpenID Connect vs OAuth | OpenID Connect explained
🔥More exclusive content: https://productioncoder.com/you-decid...
Twitter: https://twitter.com/_jgoebel
Website: https://jangoebel.com
Blog: https://productioncoder.com
00:00 What is OpenID Connect and how does it relate to OAuth?
00:50 OAuth does not provide identity information to the third party application
03:14 A practical OpenID Connect example
04:00 Scopes for OpenID Connect
07:17 OpenID Connect Identity tokens
08:41 Conclusion
This video explains what OpenID Connect (OIDC) is and how it relates to OAuth. OpenID Connect is a thin identity layer on top of OAuth that provides authentication details about end users. OAuth is all about giving third party applications limited access to HTTP resources. To give access to HTTP resources, identity information is not required.
However, for...
published: 01 Nov 2021
-
What Is Single Sign-on (SSO)? How It Works
To get better at system design, subscribe to our weekly newsletter: https://bit.ly/3tfAlYD
Checkout our bestselling System Design Interview books:
Volume 1: https://amzn.to/3Ou7gkd
Volume 2: https://amzn.to/3HqGozy
ABOUT US:
Covering topics and trends in large-scale system design, from the authors of the best-selling System Design Interview series.
published: 17 Nov 2022
16:36
An Illustrated Guide to OAuth and OpenID Connect
OAuth 2.0 and OpenID Connect (OIDC) are internet standards that enable one application to access data from another. Unfortunately, these standards use a lot of ...
OAuth 2.0 and OpenID Connect (OIDC) are internet standards that enable one application to access data from another. Unfortunately, these standards use a lot of jargon and terminology that make them more difficult to understand. The goal of this video is to explain how these standards work using simplified illustrations.
Check out our new video course! The Nuts and Bolts of OAuth 2.0
https://oauth2simplified.com/course
If you'd prefer to read a post on this subject, or find related posts that dive deeper into OAuth and OIDC, go to https://developer.okta.com/blog/2019/10/21/illustrated-guide-to-oauth-and-oidc
Okta is a developer API service that stores user accounts for your web apps, mobile apps, and APIs.
* Sign up for Okta for free at https://developer.okta.com/signup/
* For more info visit us at https://developer.okta.com/
* Developer Blog: https://developer.okta.com/blog/
* Sign up for our newsletter! https://a0.to/zeroindex
* Follow us on Twitter: https://twitter.com/oktadev
* Follow us on FB: https://www.facebook.com/oktadevelopers/
* Follow us on LinkedIn: https://www.linkedin.com/company/oktadev
https://wn.com/An_Illustrated_Guide_To_Oauth_And_Openid_Connect
OAuth 2.0 and OpenID Connect (OIDC) are internet standards that enable one application to access data from another. Unfortunately, these standards use a lot of jargon and terminology that make them more difficult to understand. The goal of this video is to explain how these standards work using simplified illustrations.
Check out our new video course! The Nuts and Bolts of OAuth 2.0
https://oauth2simplified.com/course
If you'd prefer to read a post on this subject, or find related posts that dive deeper into OAuth and OIDC, go to https://developer.okta.com/blog/2019/10/21/illustrated-guide-to-oauth-and-oidc
Okta is a developer API service that stores user accounts for your web apps, mobile apps, and APIs.
* Sign up for Okta for free at https://developer.okta.com/signup/
* For more info visit us at https://developer.okta.com/
* Developer Blog: https://developer.okta.com/blog/
* Sign up for our newsletter! https://a0.to/zeroindex
* Follow us on Twitter: https://twitter.com/oktadev
* Follow us on FB: https://www.facebook.com/oktadevelopers/
* Follow us on LinkedIn: https://www.linkedin.com/company/oktadev
- published: 05 Nov 2019
- views: 594150
2:49
SAML vs. OpenID (OIDC): What's the Difference?
In this video, learn the differences between Security Assertion Markup Language (SAML 2.0) and OIDC, which is built on the OAuth 2.0 framework. Read the full po...
In this video, learn the differences between Security Assertion Markup Language (SAML 2.0) and OIDC, which is built on the OAuth 2.0 framework. Read the full post: https://jumpcloud.com/blog/saml-vs-openid
Learn more about SSO with JumpCloud: https://jumpcloud.com/platform/single-sign-on?utm_source=youtube-organic&utm_medium=referral&utm_content=saml-vs-openid
Try JumpCloud for free: https://jumpcloud.com/signup?utm_source=youtube-organic&utm_medium=referral&utm_content=saml-vs-openid
Resources and social media:
-Blog: https://jumpcloud.com/blog?utm_source=youtube-organic&utm_medium=referral&utm_content=saml-vs-openid
-Community: https://community.jumpcloud.com/
-Facebook: https://www.facebook.com/JumpCloud.DaaS/
-Twitter: https://twitter.com/JumpCloud
-LinkedIn: https://www.linkedin.com/company/jumpcloud
#jumpcloud #sso #singlesignon #oauth2 #saml
Transcript:
OpenID Connect and SAML are both used for single sign-on or SSO, and the sign-in process is similar. However, there are distinct technical differences to assess before you begin your project. SAML allows an identity provider or IDP to securely federate identity for authentication and authorization into web apps. SAML can be more difficult for service providers or SPs to implement, and some even charge for it. It requires XML schema to transmit user information. That aspect can be very granular for managing access, control, and permissions, but it also adds some complexity. That's where OpenID comes in. It can be simpler for SPs to implement because it's lightweight and high performance. It's only focused on authentication. That makes it a popular choice for managing sign-in flows and assertions for mobile applications.
SAML is a widely used mature SSO protocol. Passwords aren't sent over the wire or stored with SPs. It signs users in with one set of credentials, but also can authorize access to resources between the IDP and the SP. XML documents transmit assertions about the user, who they are, and how that information was issued. Web browsers help to make this happen and SAML is always going to be used for websites. OpenID is based on the OAUTH 2.0 standard and works a bit differently. Users are redirected from the relying party, RP, to the OpenID provider, OP, as opposed to IDPs and SPs. There are direct calls between the RP and OP using REST and JSON message flows that are accessible using APIs.
ID tokens transmit information, or claims, about the user versus it being contained in SAML's XML documents. Claims are OpenID's equivalent to SAML assertions. The difference in how identity information is released between the protocols means that OpenID can be used for both websites and applications. Both SAML and OpenID are authentication protocols, and it's not a binary choice. They can be used in combination with other authentication standards depending on the use case. For example, a subject matter expert within the healthcare industry would use SAML for secure application portal access, but a mobile app would benefit from the efficiencies of OpenID. The choice comes down to your technical requirements, what applications your organization is using, and the resources that are available to implement SSO.
JumpCloud offers both SAML and OpenID configurations for SSO implementation, as well as pre-built and custom connectors. Learn more at the link in the description below.
https://wn.com/Saml_Vs._Openid_(Oidc)_What's_The_Difference
In this video, learn the differences between Security Assertion Markup Language (SAML 2.0) and OIDC, which is built on the OAuth 2.0 framework. Read the full post: https://jumpcloud.com/blog/saml-vs-openid
Learn more about SSO with JumpCloud: https://jumpcloud.com/platform/single-sign-on?utm_source=youtube-organic&utm_medium=referral&utm_content=saml-vs-openid
Try JumpCloud for free: https://jumpcloud.com/signup?utm_source=youtube-organic&utm_medium=referral&utm_content=saml-vs-openid
Resources and social media:
-Blog: https://jumpcloud.com/blog?utm_source=youtube-organic&utm_medium=referral&utm_content=saml-vs-openid
-Community: https://community.jumpcloud.com/
-Facebook: https://www.facebook.com/JumpCloud.DaaS/
-Twitter: https://twitter.com/JumpCloud
-LinkedIn: https://www.linkedin.com/company/jumpcloud
#jumpcloud #sso #singlesignon #oauth2 #saml
Transcript:
OpenID Connect and SAML are both used for single sign-on or SSO, and the sign-in process is similar. However, there are distinct technical differences to assess before you begin your project. SAML allows an identity provider or IDP to securely federate identity for authentication and authorization into web apps. SAML can be more difficult for service providers or SPs to implement, and some even charge for it. It requires XML schema to transmit user information. That aspect can be very granular for managing access, control, and permissions, but it also adds some complexity. That's where OpenID comes in. It can be simpler for SPs to implement because it's lightweight and high performance. It's only focused on authentication. That makes it a popular choice for managing sign-in flows and assertions for mobile applications.
SAML is a widely used mature SSO protocol. Passwords aren't sent over the wire or stored with SPs. It signs users in with one set of credentials, but also can authorize access to resources between the IDP and the SP. XML documents transmit assertions about the user, who they are, and how that information was issued. Web browsers help to make this happen and SAML is always going to be used for websites. OpenID is based on the OAUTH 2.0 standard and works a bit differently. Users are redirected from the relying party, RP, to the OpenID provider, OP, as opposed to IDPs and SPs. There are direct calls between the RP and OP using REST and JSON message flows that are accessible using APIs.
ID tokens transmit information, or claims, about the user versus it being contained in SAML's XML documents. Claims are OpenID's equivalent to SAML assertions. The difference in how identity information is released between the protocols means that OpenID can be used for both websites and applications. Both SAML and OpenID are authentication protocols, and it's not a binary choice. They can be used in combination with other authentication standards depending on the use case. For example, a subject matter expert within the healthcare industry would use SAML for secure application portal access, but a mobile app would benefit from the efficiencies of OpenID. The choice comes down to your technical requirements, what applications your organization is using, and the resources that are available to implement SSO.
JumpCloud offers both SAML and OpenID configurations for SSO implementation, as well as pre-built and custom connectors. Learn more at the link in the description below.
- published: 23 May 2023
- views: 46217
16:19
OAuth 2.0 & OpenID Connect (OIDC): Technical Overview
This video explains the basics of the OAuth 2.0 & OpenID Connect (OIDC) protocol, focusing on what an IT administrator must know.
VMware End-User Computing (EU...
This video explains the basics of the OAuth 2.0 & OpenID Connect (OIDC) protocol, focusing on what an IT administrator must know.
VMware End-User Computing (EUC) solutions empower the digital workspace by simplifying app & access management, unifying endpoint management & transforming Windows delivery. Learn more on the Digital Workspace Tech Zone: https://techzone.vmware.com.
https://wn.com/Oauth_2.0_Openid_Connect_(Oidc)_Technical_Overview
This video explains the basics of the OAuth 2.0 & OpenID Connect (OIDC) protocol, focusing on what an IT administrator must know.
VMware End-User Computing (EUC) solutions empower the digital workspace by simplifying app & access management, unifying endpoint management & transforming Windows delivery. Learn more on the Digital Workspace Tech Zone: https://techzone.vmware.com.
- published: 23 Sep 2020
- views: 162580
1:36
What is OpenID Connect?
The federation space is quickly changing, and successful business adapt quickly to the newest technology. OpenID Connect is a key example of the newest in techn...
The federation space is quickly changing, and successful business adapt quickly to the newest technology. OpenID Connect is a key example of the newest in technology. This video highlights the value of using Okta to implement OpenID Connect into your application, not only for your customers, but for your B2B partners as well.
https://wn.com/What_Is_Openid_Connect
The federation space is quickly changing, and successful business adapt quickly to the newest technology. OpenID Connect is a key example of the newest in technology. This video highlights the value of using Okta to implement OpenID Connect into your application, not only for your customers, but for your B2B partners as well.
- published: 18 Jun 2019
- views: 25817
1:02:17
OAuth 2.0 and OpenID Connect (in plain English)
Developer Advocate Nate Barbettini breaks down OpenID and OAuth 2.0 in Plain English. NOTE: This video is from 2018 and contains some information that is now ou...
Developer Advocate Nate Barbettini breaks down OpenID and OAuth 2.0 in Plain English. NOTE: This video is from 2018 and contains some information that is now out of date, mainly the content around the OAuth Implicit Flow.
Check out our video course! The Nuts and Bolts of OAuth 2.0 https://oauth2simplified.com/course
Learn more about OAuth at https://oauth.net
Get the book: OAuth 2.0 Simplified https://amzn.to/36HAGoS
Find Nate's slides here: https://speakerdeck.com/nbarbettini/oauth-and-openid-connect-in-plain-english
Sign up for our newsletter! https://a0.to/zeroindex
https://wn.com/Oauth_2.0_And_Openid_Connect_(In_Plain_English)
Developer Advocate Nate Barbettini breaks down OpenID and OAuth 2.0 in Plain English. NOTE: This video is from 2018 and contains some information that is now out of date, mainly the content around the OAuth Implicit Flow.
Check out our video course! The Nuts and Bolts of OAuth 2.0 https://oauth2simplified.com/course
Learn more about OAuth at https://oauth.net
Get the book: OAuth 2.0 Simplified https://amzn.to/36HAGoS
Find Nate's slides here: https://speakerdeck.com/nbarbettini/oauth-and-openid-connect-in-plain-english
Sign up for our newsletter! https://a0.to/zeroindex
- published: 05 Feb 2018
- views: 1781931
8:35
Openid Connect Authentication
#AzureAD #OpenidConnect #Authentication #MicrosoftGraph #Protocol
OpenidConnect Protocol
Authentication Flow
Oauth 2.0 VS OpenidConnect Protocol
How does Ope...
#AzureAD #OpenidConnect #Authentication #MicrosoftGraph #Protocol
OpenidConnect Protocol
Authentication Flow
Oauth 2.0 VS OpenidConnect Protocol
How does Openid Connect Authentication flow works with Azure Active Directory ?
Microsoft Article - https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
Oauth playlist - https://www.youtube.com/playlist?list=PL8wOlV8Hv3o-a7GMEh5iZF21rD9nKtc7d
SAAS - https://www.youtube.com/playlist?list=PL8wOlV8Hv3o8sAPfpO16njVxVUcuCTJU7
Regards,
ConceptsWork
https://wn.com/Openid_Connect_Authentication
#AzureAD #OpenidConnect #Authentication #MicrosoftGraph #Protocol
OpenidConnect Protocol
Authentication Flow
Oauth 2.0 VS OpenidConnect Protocol
How does Openid Connect Authentication flow works with Azure Active Directory ?
Microsoft Article - https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
Oauth playlist - https://www.youtube.com/playlist?list=PL8wOlV8Hv3o-a7GMEh5iZF21rD9nKtc7d
SAAS - https://www.youtube.com/playlist?list=PL8wOlV8Hv3o8sAPfpO16njVxVUcuCTJU7
Regards,
ConceptsWork
- published: 17 May 2020
- views: 79736
8:38
ID Tokens VS Access Tokens: What's the Difference?
ID Tokens vs Access Tokens. What are they and when do you use them? How do they differ? Where do they come from? We'll briefly cover OAuth 2.0 and OpenID Connec...
ID Tokens vs Access Tokens. What are they and when do you use them? How do they differ? Where do they come from? We'll briefly cover OAuth 2.0 and OpenID Connect and the difference between Authentication and Authorization.
Grab the FREE Cheat Sheet from the Auth0 by Okta blog post -
https://auth0.com/blog/id-token-access-token-what-is-the-difference/
Sign up for our monthly newsletter! https://a0.to/zeroindex
#authentication #developer #tokens #login
___________________________________________
Learn with Auth0 by Okta
Try for free - https://a0.to/auth0
The Auth0 by Okta blog - https://a0.to/blog
Ask questions on the Community Forum - https://a0.to/community ___________________________________________
Follow Us on Social
Twitter - https://twitter.com/oktadev
LinkedIn - https://www.linkedin.com/company/oktadev
https://wn.com/Id_Tokens_Vs_Access_Tokens_What's_The_Difference
ID Tokens vs Access Tokens. What are they and when do you use them? How do they differ? Where do they come from? We'll briefly cover OAuth 2.0 and OpenID Connect and the difference between Authentication and Authorization.
Grab the FREE Cheat Sheet from the Auth0 by Okta blog post -
https://auth0.com/blog/id-token-access-token-what-is-the-difference/
Sign up for our monthly newsletter! https://a0.to/zeroindex
#authentication #developer #tokens #login
___________________________________________
Learn with Auth0 by Okta
Try for free - https://a0.to/auth0
The Auth0 by Okta blog - https://a0.to/blog
Ask questions on the Community Forum - https://a0.to/community ___________________________________________
Follow Us on Social
Twitter - https://twitter.com/oktadev
LinkedIn - https://www.linkedin.com/company/oktadev
- published: 09 Jan 2023
- views: 179599
4:32
OAuth 2 Explained In Simple Terms
Get a Free System Design PDF with 158 pages by subscribing to our weekly newsletter: https://bytebytego.ck.page/subscribe
Animation tools: Adobe Illustrator an...
Get a Free System Design PDF with 158 pages by subscribing to our weekly newsletter: https://bytebytego.ck.page/subscribe
Animation tools: Adobe Illustrator and After Effects.
Checkout our bestselling System Design Interview books:
Volume 1: https://amzn.to/3Ou7gkd
Volume 2: https://amzn.to/3HqGozy
The digital version of System Design Interview books: https://bit.ly/3mlDSk9
ABOUT US:
Covering topics and trends in large-scale system design, from the authors of the best-selling System Design Interview series.
https://wn.com/Oauth_2_Explained_In_Simple_Terms
Get a Free System Design PDF with 158 pages by subscribing to our weekly newsletter: https://bytebytego.ck.page/subscribe
Animation tools: Adobe Illustrator and After Effects.
Checkout our bestselling System Design Interview books:
Volume 1: https://amzn.to/3Ou7gkd
Volume 2: https://amzn.to/3HqGozy
The digital version of System Design Interview books: https://bit.ly/3mlDSk9
ABOUT US:
Covering topics and trends in large-scale system design, from the authors of the best-selling System Design Interview series.
- published: 29 Jun 2023
- views: 496851
8:50
OpenID Connect vs OAuth | OpenID Connect explained
🔥More exclusive content: https://productioncoder.com/you-decid...
Twitter: https://twitter.com/_jgoebel
Website: https://jangoebel.com
Blog: https://productionc...
🔥More exclusive content: https://productioncoder.com/you-decid...
Twitter: https://twitter.com/_jgoebel
Website: https://jangoebel.com
Blog: https://productioncoder.com
00:00 What is OpenID Connect and how does it relate to OAuth?
00:50 OAuth does not provide identity information to the third party application
03:14 A practical OpenID Connect example
04:00 Scopes for OpenID Connect
07:17 OpenID Connect Identity tokens
08:41 Conclusion
This video explains what OpenID Connect (OIDC) is and how it relates to OAuth. OpenID Connect is a thin identity layer on top of OAuth that provides authentication details about end users. OAuth is all about giving third party applications limited access to HTTP resources. To give access to HTTP resources, identity information is not required.
However, for some type of apps, it is actually very useful to know at least a little bit about the user (like the email or profile information). This is where OpenID Connect comes in. During the OAuth flow, the third party application requests the additional openid scope and specific standardizes scopes by OpenID Connect. When the access is granted by the end user, the application not only receives an access token, but also receives an identity token (id token). The id token is a JSON Web Token (JSON Web Signature Token) that contains information about the end user. Third party application can ask for predefined scopes like email or profile information.
The information in the id token from OpenID Connect can then be used to provide a better user experience.
https://wn.com/Openid_Connect_Vs_Oauth_|_Openid_Connect_Explained
🔥More exclusive content: https://productioncoder.com/you-decid...
Twitter: https://twitter.com/_jgoebel
Website: https://jangoebel.com
Blog: https://productioncoder.com
00:00 What is OpenID Connect and how does it relate to OAuth?
00:50 OAuth does not provide identity information to the third party application
03:14 A practical OpenID Connect example
04:00 Scopes for OpenID Connect
07:17 OpenID Connect Identity tokens
08:41 Conclusion
This video explains what OpenID Connect (OIDC) is and how it relates to OAuth. OpenID Connect is a thin identity layer on top of OAuth that provides authentication details about end users. OAuth is all about giving third party applications limited access to HTTP resources. To give access to HTTP resources, identity information is not required.
However, for some type of apps, it is actually very useful to know at least a little bit about the user (like the email or profile information). This is where OpenID Connect comes in. During the OAuth flow, the third party application requests the additional openid scope and specific standardizes scopes by OpenID Connect. When the access is granted by the end user, the application not only receives an access token, but also receives an identity token (id token). The id token is a JSON Web Token (JSON Web Signature Token) that contains information about the end user. Third party application can ask for predefined scopes like email or profile information.
The information in the id token from OpenID Connect can then be used to provide a better user experience.
- published: 01 Nov 2021
- views: 39420
4:54
What Is Single Sign-on (SSO)? How It Works
To get better at system design, subscribe to our weekly newsletter: https://bit.ly/3tfAlYD
Checkout our bestselling System Design Interview books:
Volume 1: h...
To get better at system design, subscribe to our weekly newsletter: https://bit.ly/3tfAlYD
Checkout our bestselling System Design Interview books:
Volume 1: https://amzn.to/3Ou7gkd
Volume 2: https://amzn.to/3HqGozy
ABOUT US:
Covering topics and trends in large-scale system design, from the authors of the best-selling System Design Interview series.
https://wn.com/What_Is_Single_Sign_On_(Sso)_How_It_Works
To get better at system design, subscribe to our weekly newsletter: https://bit.ly/3tfAlYD
Checkout our bestselling System Design Interview books:
Volume 1: https://amzn.to/3Ou7gkd
Volume 2: https://amzn.to/3HqGozy
ABOUT US:
Covering topics and trends in large-scale system design, from the authors of the best-selling System Design Interview series.
- published: 17 Nov 2022
- views: 592676