All comparisons

Comparison

OAuth 2.0vsOpenID Connect

OAuth 2.0 supports delegated authorization; OpenID Connect adds authentication and standardized identity claims.

OAuth 2.0 is an authorization framework, while OpenID Connect (OIDC) adds an identity and authentication layer.

OAuth lets a client obtain limited access to a protected resource, typically through an access token. OIDC adds an ID token and standardized identity claims so a client can verify the end user's authentication. Applications often use both, but an OAuth access token alone should not be treated as proof of user identity.