OAuth and OIDC

  1. Advanced OAuth and OIDC Topics
    1. Token Management
      1. Token Revocation
        1. Revocation Endpoint
          1. Revocation Request Format
            1. Revocation Response Handling
              1. Cascade Effects
              2. Token Introspection
                1. Introspection Endpoint
                  1. Token Status Checking
                    1. Metadata Retrieval
                      1. Privacy Considerations
                      2. Token Exchange
                        1. Use Cases
                          1. Security Token Service
                            1. Delegation Scenarios
                          2. Discovery and Metadata
                            1. OpenID Connect Discovery
                              1. Well-Known Configuration Endpoint
                                1. Metadata Contents
                                  1. Dynamic Configuration
                                  2. OAuth Authorization Server Metadata
                                    1. Endpoint Discovery
                                      1. Capability Advertisement
                                        1. Security Policy Information
                                        2. Dynamic Client Registration
                                          1. Registration Endpoint
                                            1. Client Metadata
                                              1. Registration Responses
                                                1. Update and Deletion
                                              2. Federation and Single Sign-On
                                                1. Identity Federation Concepts
                                                  1. Multi-Domain SSO
                                                    1. Identity Provider Discovery
                                                      1. Account Linking
                                                      2. Advanced OIDC Features
                                                        1. Session Management
                                                          1. Session State Monitoring
                                                            1. Logout Mechanisms
                                                              1. Front-Channel Logout
                                                                1. Back-Channel Logout
                                                                2. Claims Aggregation
                                                                  1. Distributed Claims
                                                                    1. Sector Identifiers

                                                                  Previous

                                                                  9. Security Considerations and Threats

                                                                  Go to top

                                                                  Next

                                                                  11. OAuth 2.1 Evolution