OpenID Connect

OAuth 2.0 and OIDC Explained with UML

Posted on by  
Ronald Koster

The purpose of Open Authorization 2.0 (OAuth 2.0) is to give an application (the "Client") limited access to your data at another service (the "Resource Server"), without having to give your password to that application. When OIDC is added Single Sign-On (SSO) is supported as well. The flow of these protocols can nicely be shown in a UML Sequence Diagram.

Continue reading →

shadow-left