...
The OIDC Provider from BankID employs signing and encryption of certain data elements over the REST API. Important examples are signing of ID Tokens and responses from Userinfo. An OIDC Client needs to authenticate with the OIDC Provider for many of the Endpoints. A separate section on protocol message flow provides an elaborated understanding of message flow both over the REST API as such and also the message flow with components behind the REST API. The REST API supports all flows from the OIDC/OAuth2 standards.
...