Search code examples
oauthsingle-sign-onopenid-connect

OIDC based single sign-on

How does OIDC based SSO works? Is it recommended to store OIDC token on browser? Is it safe enough? If OIDC token is stored at server side, how to pass this when browser redirection happens in order to access other SPA application?

Solution

  • The article "Identity Federation by OpenID Connect" explains how OIDC-based SSO works.

    enter image description here