https://lesitedefrancois.be/en/tags/sso/Recent content in Sso on Le Site de FrançoisHugo -- gohugo.ioen© 2026 Françoishttps://lesitedefrancois.be/en/security/oidc/Mon, 01 Jan 0001 00:00:00 +0000https://lesitedefrancois.be/en/security/oidc/<p><strong>OpenID Connect (OIDC)</strong> is an authentication protocol built as a thin layer on top of <strong>OAuth 2.0</strong>, published by the OpenID Foundation in 2014. Where OAuth 2.0 defines how to delegate authorisation (granting access to resources), OIDC adds the missing authentication semantics: a standard <strong>ID token</strong> that proves who the user is, a <strong>UserInfo endpoint</strong> that returns standardised identity claims, and a <strong>discovery document</strong> that allows clients to configure themselves automatically from a single well-known URL. The separation is precise: OAuth 2.0 access tokens prove that a client is authorised to call an API; OIDC ID tokens prove that a specific user authenticated with a specific identity provider at a specific time. OIDC is the protocol behind virtually every &ldquo;Sign in with Google / GitHub / Microsoft&rdquo; flow, every SAML-to-modern-stack migration, and every Kubernetes service account token issued today — making it the dominant authentication federation standard in cloud-native infrastructure.</p>