Richie
Richie

Reputation: 5199

Does OIDC make sense for B2B?

I'm implementing an API Gateway and have a very simple question about OIDC connect as an authentication method.

Does Open Id connect only suit the use case of B2C. i.e. I am a customer logging into a website, when i present my credentials to the resource server, it validates with the auth server and i get an access token.

Does it make sense to apply open id connect to B2B? i.e. I am an application trying to access an API. When I present my credentials to the resource server, it validates it with the auth server.

If it does if someone could point me out to some doco on differences between a user and an app for oidc that would be great.

thanks

Upvotes: 2

Views: 833

Answers (1)

Jan Garaj
Jan Garaj

Reputation: 28676

I'm not sure what B2B means, but it looks like M2M (machine-to-machine), where you can use client credentials OIDC flow. OIDC offers also grant code/implicit flow for user authentication. Overview of available OIDC flows: https://auth0.com/docs/flows

Upvotes: 1

Related Questions