32 docs tagged with "oidc"

15-minute quickstart: implement Authorization Code Flow with PKCE against LuxID, with cURL examples, sequence diagram, and ID token validation.

PAR, JAR, and rate limiting for LuxID Partners with elevated security requirements. PAR and JAR are informational only - not currently implemented by LuxID.

Ready-made Postman collections, OpenAPI spec, and CI smoke-test scripts for the full LuxID token flow.

Overview of extended LuxID technical capabilities: UserInfo, introspection, revocation, webhooks, delegated authorisation, and cross-border federation.

Overview of LuxID authentication protocols - OIDC, OAuth 2.0, and SAML 2.0 - with guidance on choosing the right approach for your integration.

A consolidated reference of every parameter LuxID accepts on the authorization endpoint, with its required/optional status, accepted values, and LuxID specifics.

Curated index of reference repositories, starter templates, and validation utilities for integrating LuxID with the major language ecosystems.

Concept-mapping guide for developers used to multi-tenant IdPs: what maps to what on LuxID, what stays standard OIDC, and what you cannot customize.

The ten most frequent LuxID integration mistakes, with exact error responses, root causes, and fixes.

End-to-end guide: become a LuxID Partner, register an Application, obtain credentials, and complete a first test login using Authorization Code + PKCE.

Copy-paste curl and PowerShell commands to exercise LuxID's OIDC endpoints - discovery, token, refresh, userinfo, introspection - for troubleshooting.

Canonical list of LuxID OIDC, SAML and supporting endpoints for production and UAT, derived from the discovery document - one place to look up every URL.

Add LuxID as an OpenID Connect Identity Provider in FusionAuth, including the reconcile lambda for claim mapping, testing, and production checklist.

Configure any OIDC-capable identity broker against LuxID: discovery URL, PKCE (S256), RS256 ID tokens, exact-match redirect URIs, and JWKS rotation.

LuxID OIDC endpoints, scopes, claims, and field mapping reference for any tool that asks for OpenID Connect provider details.

Configure LuxID as an upstream OIDC provider behind your own broker: Keycloak, FusionAuth, Matrix (Synapse, MAS), SAP Customer Data Cloud, or generic OIDC.

Authentication, authorisation, federation, sessions vs tokens, open standards, and JWT structure explained for LuxID integrators.

How LuxID signs ID Tokens, how to validate signatures using the JWKS endpoint, key rotation behaviour, and client credential security.

Add LuxID as an external OpenID Connect identity provider in Keycloak (Identity Brokering): field mapping, claim mappers, testing, production checklist.

Core identity concepts and the LuxID domain model you need before writing any integration code.

Configure LuxID as an OIDC provider for a Matrix homeserver: legacy Synapse built-in OIDC and the next-gen Matrix Authentication Service (MAS).

Reference catalogue of OAuth 2.0 and OIDC error codes at LuxID with the most common cause and fix for each.

Decision matrix and flowchart to help IT admins choose between OpenID Connect and SAML 2.0 when integrating LuxID with an off-the-shelf tool.

Full OIDC protocol reference for LuxID: discovery, all request parameters, token validation, UserInfo, refresh, silent re-auth, logout, and response modes.

Architectural decisions to make before writing production code: protocol, required auth_level, MFA, Sphere, session strategy, logout, and branding.

Minimal configuration to wire LuxID into Spring, ASP.NET, Node.js, Next.js, React SPA, Angular, React Native, iOS, Android, PHP, and Python.

Security checklist for LuxID integrations: HTTPS, PKCE, state/nonce, ID Token validation, token storage, open redirects, and anti-patterns to avoid.

Configure LuxID as an OpenID Connect identity provider in SAP Customer Data Cloud (formerly Gigya): field mapping, JIT account behaviour, and common pitfalls.

How to persist refresh tokens, silently renew sessions, and avoid re-prompting users for credentials and OTP on every app restart.

How to inspect and validate LuxID ID Tokens and Access Tokens using the Token Debugger tool and offline alternatives.

ID Token, Access Token, and Refresh Token explained in depth: lifetimes, signing, validation rules, and the full LuxID claim catalogue including extensions.

Call the LuxID UserInfo endpoint with a Bearer access token to fetch current profile claims: request formats, response claims, caching, and errors.