Software Design

OpenID Connect: Identity on Top of OAuth

UML Sequence Diagrams · made in Skemio

Sequence diagram showing OpenID Connect login flow between User, Client App, and Identity Provider returning ID and Access tokens.
Sequence diagram showing OpenID Connect login flow between User, Client App, and Identity Provider returning ID and Access tokens.
Open it in SkemioMake your own

What it shows

  • OIDC introduces the ID Token, a signed JWT containing user profile claims.
  • Standardizes scopes like 'openid', 'profile', and 'email' across providers.
  • Clients verify identity locally by validating the ID Token signature.

The takeaway

OAuth grants access to resources; OpenID Connect tells your application who the authenticated user is.

More uml sequence diagrams