Simple definition
A layer of identity based on OAuth 2.0 used to authenticate a user.
Technical definition
In particular, OIDC adds a signed Token ID containing authenticated identity information and standardized public service.
What is it used for ?
Allow modern connection to web and mobile applications.
Practical example
An application can use Entra ID as a supplier OpenID Connect to authenticate its users.
Common issues
- Redirecting incorrect URI
- Insufficient token validation
- Misconfigured dimensions
Related terms
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.