Glossary: Identity and Access Management

OIDC (OpenID Connect)

Also written: OpenID Connect

A thin layer on top of OAuth that adds sign-in. When the app asks for the `openid` scope it also gets an ID token. It is the modern JSON-based alternative to SAML.

Where the book teaches it

Chapter 6: Single sign-on and federation
Chapter 7: OAuth and OpenID Connect
Chapter 12: Project: IAM for Kettle & Crane

Related terms

OAuth ID token SAML (Security Assertion Markup Language)JWT (JSON Web Token)