.NET Architecture & System Design Interview Question #164

What is OpenID Connect?

Security Architecture, Multi-Tenancy & Disaster Recovery Senior Advanced

Quick Interview Answer

OpenID Connect is an identity layer built on OAuth 2.0. It enables clients to authenticate users and obtain standardized identity information, including an ID token.

Detailed Explanation

OpenID Connect is an identity layer built on OAuth 2.0. It enables clients to authenticate users and obtain standardized identity information, including an ID token.

A typical web application can use OpenID Connect for sign-in while using OAuth access tokens to call protected APIs. Authentication and API authorization remain distinct concerns.

Code Example

User -> Identity Provider
          |
       ID Token
          |
Web App authenticated

Access Token -> protected API