The OpenID Connect Provider from BankID (hereafter referred to as the OIDC Provider) is illustrated below. It consists of a industry-standard REST API (left side) in front of various Identity Providers (IDP) and Protected Resources. The REST API implements a set of Endpoints defined by the OpenID Connect 1.0 authentication standard and the OAuth 2.0 authorization framework. The OIDC Provider supports several protocol flows (grant types) and . Consent handling is a key feature of the platformfor any flow that involves access to resources owned by the end-user.
The preferred way to integrate with the OIDC Provider is to use a set of JavaScript connectors being front-end wrappers of the API.
...