OpenID Connect

OpenID Connect is an identity layer built on top of the OAuth 2.0 authorization framework, enabling clients to verify the identity of end-users based on authentication performed by an authorization server. It provides a standardized way for applications to obtain basic profile information about users in a secure and interoperable manner, using JSON Web Tokens (JWTs) to convey identity claims. This protocol is widely used for single sign-on (SSO) and federated identity scenarios across web and mobile applications.

Also known as: OIDC, OpenID, Open ID Connect, OpenID 2.0 (legacy), OpenID Connect 1.0
🧊Why learn OpenID Connect?

Developers should learn and use OpenID Connect when building applications that require secure user authentication and identity verification, such as enterprise SSO systems, consumer-facing apps with social login, or any service needing to integrate with identity providers like Google, Microsoft, or Okta. It simplifies authentication flows by standardizing token-based identity verification, reducing the need for custom authentication code and enhancing security through built-in features like token validation and user consent management.

See how it ranks →

Compare OpenID Connect

Learning Resources

Related Tools

Alternatives to OpenID Connect

Other Auth Protocols

View all →
6LoWPAN
6LoWPAN (IPv6 over Low-Power Wireless Personal Area Networks) is a networking protocol that enables IPv6 communication over low-power, low-data-rate wireless networks, such as those used in IoT devices. It compresses IPv6 packets to fit within the constraints of IEEE 802.15.4 networks, allowing seamless integration of resource-constrained devices into the internet. This protocol is essential for enabling IoT applications by providing efficient, standardized IP-based connectivity for sensors and actuators.
Acme Protocol
Acme Protocol is a standardized communication protocol used for automated certificate management, primarily for obtaining and renewing SSL/TLS certificates from certificate authorities (CAs). It enables servers and applications to automatically request, validate, and install certificates without manual intervention, streamlining the process of securing web services with HTTPS. The protocol is widely implemented by CAs and tools like Let's Encrypt to support the ACME (Automated Certificate Management Environment) standard.
ActivityPub
ActivityPub is a decentralized social networking protocol that enables different social platforms to communicate with each other, allowing users to interact across independent servers. It provides a standardized way for servers to exchange social activities like posts, likes, and follows, forming a federated network where no single entity controls the entire system. This protocol underpins many modern federated social networks, promoting interoperability and user autonomy.
ActivityPub
ActivityPub is a decentralized social networking protocol that enables different social media platforms to communicate with each other, allowing users to interact across servers. It defines a client-to-server API for creating, updating, and deleting content, and a server-to-server API for federated interactions, forming a federated social web. This protocol underpins federated social media networks like Mastodon, PeerTube, and Pixelfed, facilitating interoperability without central control.
ActivityPub
ActivityPub is an open, decentralized social networking protocol that enables servers to communicate and share social activities, such as posts, likes, and follows, across different platforms. It is a W3C standard that defines a client-to-server API for creating, updating, and deleting content, as well as a server-to-server API for federated interactions between independent servers. This allows users on different social media platforms to interact seamlessly, fostering interoperability in the fediverse.
AFP
AFP (Apple Filing Protocol) is a proprietary network protocol developed by Apple for file sharing over a network, primarily used with Apple's macOS and classic Mac OS operating systems. It enables users to access files and services on remote servers as if they were local, supporting features like file locking, Unicode filenames, and resource forks. While historically central to AppleTalk networks, it has been largely superseded by SMB (Server Message Block) in modern Apple environments.