SSO Flow diagram using OpenID Connect (OIDC) protocol with Liferay DXP Portal

This Flow diagram illustrate implementing SSO using OpenID Connect (OIDC) protocol with Liferay DXP Portal.

Step 1) A) User request SignIn page using browser , B) SignIn Page Open up , User clicks on the SignIn Link

Step 2) Liferay redirects to the SignIn page of the OIDC Provider screen (Could be Microsoft ,google or any other provider called as Authorization Endpoint )

Step 3) User enters the credentials

Step 4) OIDC Provider process the request and generate a Token and sends back to the user browser .

Step 5) Browser redirect the request to Liferay OIDC Redirect URI along with Token

Step 6) Liferay Validates the token using Providers JWKS URI which contains the public keys that can verify the token. Once token Validation is successful Liferay adds a session cookie on to the browser which to keeps the session with the browser alive .