29 articles tagged OpenID Connect.
The OpenID Connect (OIDC) family of specs supports logout (from a single application) and global (or single) logout (from all applications that the user has logged into through the OpenID Provider, OP), but these features are optional or in draft status (as of Q2, 2017). So, these spec features may…
Read article: OpenID Connect LogoutUpdate(07/01/2019): This is by far my most popular post. I’ve continued to update this article based on feedback and things that I have noticed. I’m trying to keep it relevant.Please leave feedback in the comments section.
Read article: When To Use Which (OAuth2) Grants and (OIDC) FlowsExtending OAuth2 and OpenID Connect as the enterprise standard for API security
Read article: An Alternative to Delegated Access in the EnterpriseThe following blog posts make up my series on OpenID Connect. This is part of the SAML2 vs JWT series.
Read article: Understanding OpenID Connect SeriesIn part 1 and part 2 of Understanding OpenID Connect, core concepts and the first Authentication Flow (Authorization Code Grant Flow) were introduced. In part 3, we look at the remaining Authentication Flows (Implicit Flow and Hybrid Flow) and some other features of the OIDC specification.
Read article: SAML2 vs JWT: Understanding OpenID Connect Part 3This post continues our discussion of OpenID Connect (OIDC). We look at one of the three Authentication Flows defined by the OIDC spec — the Authorization Code Grant Flow.
Read article: SAML2 vs JWT: Understanding OpenID Connect Part 2This post builds upon what we learned about OAuth2 and JWT in previous posts. OpenID Connect will give us the final building block for the JWT-related use cases that this series will explore. The goal of this blog post is to provide a deep understanding of the OpenID Connect spec without having to…
Read article: SAML2 vs JWT: Understanding OpenID Connect Part 1This blog post continues the SAML2 vs JWT series. In the last post, we discussed JSON Web Tokens. Now, we are going to move on to OAuth2 and OpenID Connect, which provides some structure and protocol around the use of JWT. These protocols are used, along with JWT, to build the JWT use cases this…
Read article: SAML2 vs JWT: Understanding OAuth2In this post, we begin our exploration of the JSON Web Token (JWT) specification as part of the SAML v2.0 vs JWT Series. To understand JWT use cases, we must also look at OpenID Connect v1.0, OAuth v2.0, and and a few related specifications — the JWT spec by itself is not very interesting or…
Read article: SAML2 vs JWT: Understanding JSON Web Token (JWT)
