OpeniD Connect information

SURFnet · Oct 17, 2024 · 94dd59c · 94dd59c
1 parent cd80269
commit 94dd59c
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/images/oidc.drawio.png b/images/oidc.drawio.png
diff --git a/index.md b/index.md
@@ -75,6 +75,11 @@ receiver and the custom implementation at the host institution?
   MyAcademicID. The API server needs to be connected as a Resource Server.
   Both can be registered by [filling in the myacademic id registration form](./registration.md)
 
+- How does this OpenID connect Oauth thing work? What is the flow for token
+introspection?
+  - [Here is a nice explanation of how OpenID connect works](https://yasasramanayaka.medium.com/openid-connect-authorization-code-flow-8c02081135fc).
+  - The OpenID Connect flow is projected on the euroteq usecase [in this diagram](./openidconnect.md)
+
 ## Status
 
 - Where can I see what has to be done, and what has already been done by

diff --git a/openidconnect.md b/openidconnect.md
@@ -0,0 +1,8 @@
+# OpenID Connect in eduXchange.eu
+
+In the eduXchange enrollment usecase, MyacademicID is used as an OpenID connect
+provider, responsible for authenticating the user and managing the tokens.
+The enrollment receiver is a Relying party, and the OOAPI endpoint is a
+Resource Server.
+
+![OpenID Connect for euroteq](./images/oidc.drawio.png)