authentication
Flows tagged authentication. 4 diagrams.
CIBA Backchannel Authentication
Approve a sign-in or transaction on a separate device.
OIDC Code + PKCE
Recommended OIDC login with code and PKCE.
OIDC Implicit Flow Deprecated
Legacy browser flow with tokens in the URL fragment.
SAML SP-Initiated SSO
SP redirects to the IdP, which posts back an assertion.