Backend & systems·Security and identity
you use the identity provider to actually log the user in and get a verified claim about who they are, not just an access token.
OpenID Connect
Also calledOIDC, ID token
An authentication layer on top of OAuth 2.0 that adds a signed ID token containing verified identity claims. It exists because OAuth alone conveys no trustworthy statement about the user, and every home-grown "login with OAuth" implementation reinvented it badly. If you want single sign-on, this is the protocol, not plain OAuth.