An Introduction To OpenID Connect

In this video you will learn the basics about OpenID Connect.

This videos forms part of the Oracle Cloud Primer Series.

For more details visit the Cloud Primer Playlist at:

=================================
To improve the video quality, click the gear icon and set the Quality to 1080p/720p HD.

Copyright © 2017 Oracle and/or its affiliates. Oracle is a registered trademark of Oracle and/or its affiliates. All rights reserved. Other names may be registered trademarks of their respective owners. Oracle disclaims any warranties or representations as to the accuracy or completeness of this recording, demonstration, and/or written materials (the “Materials”). The Materials are provided “as is” without any warranty of any kind, either express or implied, including without limitation warranties or merchantability, fitness for a particular purpose, and non-infringement.

[benjamind]

Well done, quick, and easy to digest. Thanks! Ready to move on to the next one.

[vijaykodle]

epoch time, expiration date is lesser than issue date

[kevin]

I believe there author contradicts herself around :48. She says, "Oauth provides Authorization. It doesn't provide authentication. With Oauth the user authenticated and proved they were present to the authorization server". This is authentication. You only get the token once you are authenticated. You may not be authorized to use the application requesting the token but you are Authenticated. Another view point is users are always present (we don't need Oauth for that), we just don't know who they are.

[BiligetBao]

does it requires different redirect_uri for each authorization provider and authentication? //Thanks

[jvm-tv]

Half of the complexity of Open ID Connect and OAuth 2.0 are because of the their stupid choice of words. Subject as just saying user id, claims as just user user properties etc.

[JamesParkWatt]

Way too technical for an overview and way to simple to be useful to a techie.

[ruchidubey]

OAuth provides authentication not authorization as mentioned

[jasonjolt]

Tech-people(developers) are so innocent. They don't know that they are creating a big problem of privacy. All bots will try to get JWT in order to build spam lists and profile you. Your information can be shared through big- techs. It means that your information is public from now.

[anomalydnb]

I really want to understand this and skip to the next level, but its like a manager trying to explain me something about a strange AWS service, with hip words :/ Explain it with an SPA app or smth like that.