OpenID Connect is here! – An Identity Layer on the internet

Celebrate! OpenID Connect 1.0 Final is here! After four and half years, or six years if we include the time needed to start the working group, finally, OpenID Connect is released as final. Like I have been explaining many times in this blog, OpenID Connect is something that forms “the …

Scopes and Claims in OpenID Connect

In OpenID Connect, there are notions of “scopes” and “claims”. Some people see some overlap there and wonders why they are like that. Here is my attempt to explain the relationship between the two. OpenID Connect defined scopes OpenID Connect defines several scopes. They are: openid – REQUIRED. Informs the Authorization …