Understanding the basic terminology
Before diving into each pattern, we will present you with some terminology that will be used throughout the following presentation of different patterns. Then, we’re going to review the patterns recommended for different application styles:
- Application identity
As we’ll see later, there are different kinds of applications that exist. It’s important to grasp the concept of application identity though before expanding to examine the different types of applications that can be encountered.
Application identity is a concept that is tightly coupled with the OIDC and OAuth 2.0 authentication protocols. When interacting with an identity provider, an application must have and use an identity that the identity provider knows, an identity that an administrator has previously registered as part of the application configuration. Typically, an OIDC or OAuth 2.0 flow requires two application identities to be registered: a...
