الاتحاد: SAML وOAuth 2.0 وOIDC

في هذا الدرس

choose the right protocol per integration.

الموضوعات المخطط لها

• SAML: XML-based sign-in standard, common for enterprise SaaS and older apps.
• OAuth 2.0: delegated authorization: an app gets limited access to an API on a user's behalf; it is not itself a sign-in protocol.
• OpenID Connect (OIDC): sign-in layer on top of OAuth 2.0, using JSON tokens; the default for new web and mobile apps.
• Choose by what the integration supports: SaaS that only speaks SAML gets SAML; new apps and APIs use OIDC and OAuth 2.0.
• Mobile apps use the authorization code flow with PKCE; no secrets in the app.