Skip to content
IT Atlas

Identity · Federation

OpenID Connect

An authentication layer on top of OAuth 2.0 that issues signed ID tokens describing who the user is.

AdvancedUpdated 2026-09-01

Overview

OIDC adds an ID token (a JWT), a standard userinfo endpoint and discovery metadata to OAuth 2.0. Clients validate the token signature against published keys and read standard claims such as sub, iss, aud and auth_time.

Because discovery and key rotation are standardised, OIDC integrations are typically faster to build and maintain than SAML, and they extend naturally to mobile and single page applications.