OIDC
- Pages
- 1
- References
- 1
- Related Terms
- 3
Definition
OIDC is an identity layer on top of OAuth 2.0 that adds ID Tokens and user information so clients can authenticate end users.
Background
OpenID Connect Core, maintained by the OpenID Foundation, uses OAuth 2.0 flows to communicate end-user identity to clients.
Position
It sits next to OAuth and PKCE as the concept that separates authentication from authorization in external service connections.
Distinctions
- OAuth delegates access; OIDC communicates authenticated identity.
- OpenID Connect is distinct from the older OpenID 2.0 protocol.
Primary source-backed reference selected for this concept.
Sources
- OpenID Connect Core 1.0 Standard
Page Context
- OAuth 2.1 PKCE Flow and MCP Authentication Authorization Practical Guide
OAuth 2.1 PKCE flow and MCP authentication authorization practical guide 1. Executive Summary In practice, MCP server authentication and authorization can be easily understood a...
Quote: OAuth 2.1 PKCE Flow and MCP Authentication Authorization Practical Guide developer-tools
Pages
- OAuth 2.1 PKCE Flow and MCP Authentication Authorization Practical Guide
For beginners, we will organize the relationship between the MCP server, OIDC provider, OAuth client, Claude-based client, and OpenAPI-only API from the perspective of communication flow and settings.
developer-tools