Skip to main content

OpenID Authentication

What Is OpenID Connect?

OpenID Connect 1.0 is a simple identity layer on top of the OAuth 2.0 protocol. It allows you to verify the identity of your end user based on the authentication performed by an authorization server. It also allows you to obtain basic profile information about your end user in an interoperable and REST-like manner. (Source)

When Do You Need OpenID Connect?

Without OpenID, the SDK identifies contacts by a plain field value. While sufficient for basic identification, this does not guarantee that the contact is uniquely authenticated.

With OpenID authentication, the contact identity is cryptographically verified and cannot be impersonated.

How to Use OpenID Connect with the SAP Engagement Cloud SDK

You do not need to change your setup or initialization code to use OpenID tokens for contact identification.

Once the SDK is enabled, call linkAuthenticated to identify the user with an OpenID-compliant token. The openIdToken parameter is mandatory.

warning

Do not use both link and linkAuthenticated. They are mutually exclusive. Once you use one, the other is invalidated.