...
The OIDC Provider from BankID employs signing and encryption of certain data elements over the REST API. Important examples are signing of ID Tokens and responses from Userinfo. An OIDC Client needs to authenticate with the OIDC Provider for many of the Endpoints. A separate section on protocol flow provides an elaborated understanding of message sequence both over the REST API as such and also the messages flow with components behind the REST API. The OIDC Provider from BankID supports several of the flows from the OIDC/OAuth2 standards.
...