OIDC
An open identity authentication standard built on the OAuth 2.0 protocol that transmits user identity information via JWT tokens, supports stateless distributed verification, and is widely used in enterprise single sign-on and API authentication scenarios.
Core Facts
OpenID Connect is an identity layer built on top of OAuth 2.0 that introduces an ID Token, typically in JWT format, for proving user identity to the client.
The OAuth pattern authenticates users by introducing an identity provider, and after the tool authenticates, it issues an access token for the agent to use.
OAuth 2.0 is an authorization framework that implements identity authentication in conjunction with the OIDC extension.
Timeline (last 90 days)
Typical capabilities of the Agent Gateway include: OAuth/OIDC-based identity proxying and token exchange, tool whitelisting and dynamic trimming per workflow, request-level audit logs, rate limiting and cost metering, and interception and masking before requests reach production systems.
Claude Code v2.1.312 added the oidc.user_id_claim configuration item to the Claude apps gateway, allowing enterprises to identify user identity via a claim in the id_token rather than being limited to the default sub field.
When integrating Microsoft sign-in, after registering the app you need to configure the redirect URI, choose the Authorization Code Flow, and verify the ID Token's signature and issuer on the server side.
In machine-to-machine scenarios, OIDC is often combined with the "workload identity" concept, with the platform acting as issuer to provide short-lived tokens to workloads, replacing the traditional API key model.
OIDC tokens are signed with a private key by a trusted issuer, and the recipient verifies the signature using the public key obtained from the issuer's public JWKS endpoint, without needing real-time communication with the issuer.
By November 30, 2026, vendors that do not support OIDC authentication from Vercel to their services and still authenticate using long-lived keys will see an "insecure" label on their Marketplace listing.
Vercel announced it will push OIDC (OpenID Connect) to become the default authentication method across its platform and Marketplace integrations, and has set a clear phase-out timetable for vendors that do not support secure authentication.
Whether Alter can integrate with mainstream IdPs via standard protocols such as SAML, OIDC, or SCIM, and reuse enterprises' existing group and role definitions, will directly determine whether it can enter the procurement lists of mid-to-large enterprises.
In an SSO flow, the authentication assertion sent by the IdP to the application is usually carried in the form of a SAML assertion or an OIDC ID Token.
SCIM is usually used together with SAML/OIDC: the latter handles authentication, while the former handles provisioning.
40 more timeline events
All Facts (20)
OpenID Connect is an identity layer built on top of OAuth 2.0 that introduces an ID Token, typically in JWT format, for proving user identity to the client.
75%VerifiedThe OAuth pattern authenticates users by introducing an identity provider, and after the tool authenticates, it issues an access token for the agent to use.
65%VerifiedOAuth 2.0 is an authorization framework that implements identity authentication in conjunction with the OIDC extension.
65%VerifiedWorkOS is a technology company focused on providing enterprise-grade identity authentication and user management infrastructure for SaaS applications, with products covering core enterprise IT capabilities such as SSO (Single Sign-On), SCIM directory synchronization, and audit logs.
65%VerifiedOAuth 2.0专门处理授权委托，OpenID Connect在OAuth 2.0之上叠加身份验证层，SAML多用于企业联邦身份场景
65%VerifiedOAuth 2.0 only addresses authorization, while OIDC adds a standardized identity authentication layer on top of it, introducing an ID Token—typically in JWT format—to carry user identity information.
65%Unverifiedgoogle-github-actions/auth Action 专门负责处理 OIDC 认证流程，而 setup-gcloud 负责配置工具环境，两者分工协作
90%UnverifiedGoogle 于2021年推出 Workload Identity Federation（工作负载身份联合），允许 GitHub Actions 工作流通过 OIDC 令牌直接换取 GCP 访问凭证
85%UnverifiedSSO implementation typically relies on standard protocols such as SAML or OIDC, integrating with enterprise identity providers such as Okta, Azure AD, and Google Workspace.
70%UnverifiedTypical capabilities of the Agent Gateway include: OAuth/OIDC-based identity proxying and token exchange, tool whitelisting and dynamic trimming per workflow, request-level audit logs, rate limiting and cost metering, and interception and masking before requests reach production systems.
50%UnverifiedClaude Code v2.1.312 added the oidc.user_id_claim configuration item to the Claude apps gateway, allowing enterprises to identify user identity via a claim in the id_token rather than being limited to the default sub field.
50%UnverifiedWhen integrating Microsoft sign-in, after registering the app you need to configure the redirect URI, choose the Authorization Code Flow, and verify the ID Token's signature and issuer on the server side.
50%UnverifiedOIDC tokens are signed with a private key by a trusted issuer, and the recipient verifies the signature using the public key obtained from the issuer's public JWKS endpoint, without needing real-time communication with the issuer.
50%UnverifiedIn machine-to-machine scenarios, OIDC is often combined with the "workload identity" concept, with the platform acting as issuer to provide short-lived tokens to workloads, replacing the traditional API key model.
50%UnverifiedBy November 30, 2026, vendors that do not support OIDC authentication from Vercel to their services and still authenticate using long-lived keys will see an "insecure" label on their Marketplace listing.
50%UnverifiedIn an SSO flow, the authentication assertion sent by the IdP to the application is usually carried in the form of a SAML assertion or an OIDC ID Token.
50%UnverifiedSCIM is usually used together with SAML/OIDC: the latter handles authentication, while the former handles provisioning.
50%UnverifiedOIDC is built on top of OAuth 2.0 and uses JWTs to convey identity information, making it better suited to modern web and mobile applications.
50%UnverifiedA common premise of SAML and OIDC is the presence of a human user who, after authenticating at the IdP, is redirected by the browser with a token or assertion to the target domain.
50%UnverifiedGovernance requirements for integrating cloud-native AI pipelines with legacy systems include: strict authentication with OAuth2 and OIDC between microservices and the API gateway, together with fine-grained RBAC.
50%