Specifications
OpenID specifications are developed by OpenID working groups and go through three phases: Drafts, Implementer’s Drafts, and Final Specifications. Implementer’s Drafts and Final Specifications provide intellectual property protections to implementers. Final Specifications are OpenID Foundation standards.
Final Specifications
OpenID Connect specifications:
- OpenID Connect Core – Defines the core OpenID Connect functionality: authentication built on top of OAuth 2.0 and the use of claims to communicate information about the End-User
- OpenID Connect Discovery – (Optional) Defines how clients dynamically discover information about OpenID Providers
- OpenID Connect Dynamic Registration – (Optional) Defines how clients dynamically register with OpenID Providers
- OAuth 2.0 Multiple Response Types – Defines several specific new OAuth 2.0 response types
- OAuth 2.0 Form Post Response Mode – (Optional) Defines how to return OAuth 2.0 Authorization Response parameters (including OpenID Connect Authentication Response parameters) using HTML form values that are auto-submitted by the User Agent using HTTP POST
- OpenID 2.0 to OpenID Connect Migration 1.0 – (Optional) Defines how to migrate from OpenID 2.0 to OpenID Connect
Implementer’s Drafts
OpenID Connect specifications:
- Session Management – (Optional) Defines how to manage OpenID Connect sessions, including postMessage-based logout functionality
Drafts
- HTTP-Based Logout – (Optional) Defines an HTTP-based logout mechanism that does not use an OP iframe on RP pages
- Back-Channel Logout – (Optional) Defines a logout mechanism that uses back-channel communication between the OP and RPs being logged out
- Account Chooser 1.0
- Native Applications Agent Core 1.0
- Native Applications Agent API Bindings 1.0
Obsolete Specifications
Final OpenID 2.0 specifications:
- OpenID Authentication 2.0 (txt)
- OpenID Attribute Exchange 1.0 (txt)
- OpenID Provider Authentication Policy Extension 1.0 (txt)
- OpenID Simple Registration Extension 1.0 (txt)
- Yadis Discovery Protocol (Developed separately from OpenID, though used in 2.0)
OpenID 2.0 Drafts:
- OpenID Simple Registration Extension 1.1 – Draft 1 (txt)
- Contract Exchange 1.0
Early OpenID specifications:
- OpenID Authentication 1.1 (txt)
- OpenID Authentication 1.1 (original format)
- OpenID Authentication 1.0 (original format)
Libraries
The Libraries page lists libraries that implement OpenID Connect and related specifications.
See the OpenID Connect page for more information about OpenID Connect.