Skip to main content
To facilitate Single Sign-On (SSO), Digital Identity Management supports OIDC-based grant flows for Relying Parties (RPs) to obtain access tokens, refresh tokens, and ID token. Each flow is designed to support specific applications types and is broken down and described according to the application type that you are looking to build:
  • Web applications with an independent back end server (OIDC Authorization Code Grant Flow)
  • Web and mobile applications without a true back end server (OIDC Auth Code Grant Flow with PCKE)
  • 10-Foot Devices - Digital Media Players (for example, Apple TV, Roku), Smart TVs (for example, Vizio, Samsung), Set-Top Boxes (OIDC Device Authorization Grant Flow
Digital Identity Management can also support multiple grant types (that is, can support multiple flows) for a single registered OIDC RP. If your product involves several applications, you also have the choice of whether to provision multiple RPs, or just one, under your Digital Identity Management service tenancy. For example, if you have a self-service customer portal as a distinct entity from one or more streaming sites or services, and each service runs on its own distinct hostname, and especially if they have their own session management, then these would be considered separate applications. As a best practice, we recommend splitting up and registering each application as an OIDC RP. This provides greater security and accountability for each RP that relies on a single, centralized IdP. For details on how Digital Identity Management supports SSO for each application, refer to the following topics: Parent topic:Single Sign-On