What does OIDC do?
OIDC gives an application a standard way to sign in a user. The application does not store the user password. The identity provider (IdP) checks the user and returns the result.
OIDC works well for many types of application.
- Web applications
- Mobile applications
- Single-page applications
How does OIDC work?
OIDC uses OAuth 2.0 for the message flow. The application sends the user to the identity provider (IdP). The user proves who they are. The identity provider (IdP) then returns an ID token and an access token to the application.
What is an ID token?
An ID token is a signed JSON Web Token (JWT). It holds claims about the user, such as the user identifier. The application checks the signature to trust the token. The ID token proves the sign-in event.
How does SenseCrypt use OIDC?
SenseCrypt is a passwordless identity provider (IdP) from Seventh Sense. It supports OIDC, OAuth 2.0 with PKCE and PAR, and CIBA.
A user signs in by face login. The face match runs on-device, so SenseCrypt stores no biometric data on the server. Your application receives a standard OIDC ID token.
Frequently asked questions
Is OIDC the same as OAuth 2.0?
No. OAuth 2.0 handles authorization, or access to resources. OIDC adds authentication, or user identity, on top of OAuth 2.0.
What is the ID token for?
The ID token proves the user identity to your application. It is a signed JSON Web Token (JWT).
Does SenseCrypt support OIDC?
Yes. SenseCrypt is a full identity provider (IdP) with OIDC support. A user signs in by face login.
Related