OpenID Connect

FoxIDs support OpenID Connect as both up-party and down-party.

It is recommended to use OpenID Connect Authorization Code flow with PKCE, because it is considered a secure flow.

Up-party

Configure up-party OpenID Connect which trust an external OpenID Provider (OP).

How to guides:

• Connect two FoxIDs tracks in the same tenant with a track link
• Connect two FoxIDs tracks in the same or different tenants with OpenID connect
• Connect Microsoft Entra ID (Azure AD)
• Connect Azure AD B2C
• Connect IdentityServer
• Connect Signicat
• Connect Nets eID Broker

Down-party

Configure your application as a down-party OpenID Connect.

Besides receiving an ID token the client can request an access token for multiple APIs defined as down-party OAuth 2.0 resources.
An OAuth 2.0 resource can optionally be defined in a down-party OpenID Connect or a down-party OAuth 2.0.