> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# OIDC

OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0 that lets IDaaS act as an OpenID Provider (OP) to authenticate users and issue identity tokens to client applications. Use this section to configure OIDC settings, manage signing certificates, and understand how IDaaS handles OIDC authentication flows.

## Topics in this section

[🗃Foundations Learn OAuth and OIDC basics, token examples, validation requirements, and advanced security protections such as JAR, PAR, DPoP, and issuer validation.](/docs/applications-and-sso/oidc/oauth-oidc-foundations.md)

[📄️Create an application Follow these steps to create an OpenID Connect integration in your IDaaS account.](/docs/applications-and-sso/oidc/configuring-idaas.md)

[📄️Protect a SPA Integrating the IDaaS Auth SDK in your SPA](/docs/applications-and-sso/oidc/protecting-spa.md)

[📄️Protect application endpoints Learn how to use access tokens and make requests to protected endpoints.](/docs/applications-and-sso/oidc/using-access-tokens.md)

[📄️Protect AWS API Gateway Please note that this guide applies specifically to the AWS REST API Gateway. If You are using the AWS HTTP API Gateway, you can use the](/docs/applications-and-sso/oidc/secure-aws-api.md)

[📄️Protect a mobile application This document describes how to add OIDC authentication to a mobile application using IDaaS and the open-source project AppAuth.](/docs/applications-and-sso/oidc/protecting-mobile-app.md)

[📄️FAQs Frequently asked questions when integrating with IDaaS OIDC applications](/docs/applications-and-sso/oidc/faq.md)

[🗃Preconfigured applications 5 items](/docs/applications-and-sso/oidc/oidc-and-oauth-integration-guides.md)