Cripsa — Your app, Enterprise Ready.

Use case: User Authentication and Authorization with OIDC

Overview: A SAAS platform wants to provide secure access to its resources to its customers. The platform wants to use OIDC to provide a seamless user authentication and authorization experience.

Preconditions:

The SAAS platform has integrated OIDC into its authentication and authorization flow.
The end-user has a valid account with the SAAS platform and has been granted permission to access specific resources.
The IDP has been configured to provide OIDC-based authentication and authorization.

Actors:

End-user: The user who wants to access the SAAS platform
SAAS Platform:SAAS Platform: The platform providing the resources
Identity Provider (IDP): The service providing OIDC-based authentication and authorization

Flow:

End-user navigates to the SAAS platform login page.
SAAS platform sends an authentication request to the IDP.
IDP responds with a login page and prompts the user to enter their credentials.
End-user enters their credentials and submits the form to the IDP.
IDP verifies the user's credentials and generates an ID token and access token.
IDP returns the ID token and access token to the SAAS platform.
SAAS platform verifies the ID token's signature and validates the user's authorization using the access token.
SAAS platform grants access to the user if they are authorized.
End-user can now access the resources provided by the SAAS platform.

Postconditions:

The end-user has successfully authenticated and authorized with the SAAS platform using OIDC.
The SAAS platform has granted access to the requested resources to the end-user.
The IDP has provided the SAAS platform with a valid ID token and access token, allowing the platform to verify the user's identity and authorization.

Benefits:

Improved security: OIDC provides a secure authentication and authorization mechanism, reducing the risk of unauthorized access to the platform's resources.
Seamless user experience: End-users only need to authenticate once and can access multiple resources without having to re-enter their credentials.
Reduced development effort: The SAAS platform can integrate OIDC easily, reducing the effort required to develop custom authentication and authorization mechanisms.