Identity and SSO
OpenID Connect
Modern identity layer over OAuth 2.0 for single sign-on.
Standard protocol
Identity and SSO
On RequestWorks with AnantaTech Hub · Provided by Standard protocol
What this connects
Application sign-in to any OpenID Connect provider.
Supported workflows
- Single sign-on with a standards-compliant provider
- Token-based session management
- Claims-based role mapping
Data exchanged
- ID tokens containing identity claims
- Access and refresh tokens
Setup requirements
- An OIDC provider
- Client registration with redirect URIs
- Claim-to-role mapping
Permissions required
- Identity claims released by the provider
Security and privacy
- Data is transmitted over encrypted connections (TLS).
- Tokens are signed and validated against provider keys.
- No password reaches the application.
Known limitations
Stated plainly, because finding these out during implementation is worse than knowing them now.
- Availability and scope are confirmed during setup for your specific configuration.
Need OpenID Connect connected?
Tell us how you use it today and we will confirm what is possible for your configuration before anything is committed.