21.06.2017 - Some people think OAuth is a login flow (like when you sign into an application with and the identity provider generates a cryptographically signed token which it hands off to Now you have to authorize and bring consent. .. OpenID Connect (OIDC) extends OAuth 2.0 with a new signed id_token for the .