OIDC
OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0 that lets IDaaS act as an OpenID Provider (OP) to authenticate users and issue identity tokens to client applications. Use this section to configure OIDC settings, manage signing certificates, and understand how IDaaS handles OIDC authentication flows.
Topics in this section
Foundations
Learn OAuth and OIDC basics, token examples, validation requirements, and advanced security protections such as JAR, PAR, DPoP, and issuer validation.
Create an application
Follow these steps to create an OpenID Connect integration in your IDaaS account.
Protect a SPA
Integrating the IDaaS Auth SDK in your SPA
Protect application endpoints
Learn how to use access tokens and make requests to protected endpoints.
Protect AWS API Gateway
Please note that this guide applies specifically to the AWS REST API Gateway. If You are using the AWS HTTP API Gateway, you can use the
Protect a mobile application
This document describes how to add OIDC authentication to a mobile application using IDaaS and the open-source project AppAuth.
FAQs
Frequently asked questions when integrating with IDaaS OIDC applications
Preconfigured applications
5 items