Definition
OpenID Connect OIDC is an identity layer built on top of the OAuth 2.0 framework that allows clients to verify the identity of the end user based on the authentication performed by an authorization server. It standardizes how identity information is exchanged between parties, enabling secure and streamlined single sign on SSO experiences. OIDC works by having an identity provider authenticate the user and then issuing an ID token containing claims about the user to the client application. This simplifies user management and enhances security by centralizing authentication and authorization processes. For instance, using OIDC allows you to log into multiple applications with a single set of credentials, like using your Google account to access a new service. It is important not to confuse OIDC with OAuth 2.0 itself, as OIDC adds identity information on top of OAuth 2.0's authorization capabilities. You will encounter OIDC concepts on exams like CompTIA Security+ and CySA+.