Authlete OpenID Connect Provider

Authlete is a managed-cloud and on-premise headless OAuth 2.0 / OpenID Connect engine that provides backend APIs to implement authorization servers and identity providers, supporting 40+ OAuth/OIDC specifications including FAPI profiles.

Features

Grant Types

Extensions

Endpoints

Token Endpoint Authentication Methods

none
client_secret_basic
client_secret_post
client_secret_jwt
private_key_jwt
tls_client_auth

Prompts

Features

Financial-grade API (FAPI)

If you want to compare OpenID Connect features of different providers, please check out the OpenID Connect Providers benchmark.

Looking for (C)IAM features like MFA, SSO, user management, and compliance? Check out the (C)IAM Identity Providers benchmark.

Frequently Asked Questions

Does Authlete support the Authorization Code grant type?

Authlete supports Authorization Code grant type. Read more

Does Authlete support the Refresh Token grant type?

Authlete supports Refresh Token grant type. Read more

Does Authlete support the Client Credentials grant type?

Authlete supports Client Credentials grant type. Read more

Does Authlete support the Implicit grant type?

Authlete supports Implicit grant type. Read more

Does Authlete support the Token Exchange grant type?

Authlete supports Token Exchange grant type. Read more

Does Authlete support the Client Initiated BackChannel Authentication grant type?

Authlete supports Client Initiated BackChannel Authentication grant type. Read more

Does Authlete support the Device Authorization Grant grant type?

Authlete supports Device Authorization Grant grant type. Read more

Does Authlete support the JWT Bearer Token grant type?

Authlete supports JWT Bearer Token grant type. Read more

Does Authlete support the SAML 2.0 Bearer Assertion grant type?

Authlete does not support SAML 2.0 Bearer Assertion grant type. Read more

Does Authlete support the Resource Owner Password Credentials grant type?

Authlete supports Resource Owner Password Credentials grant type. Read more

Does Authlete support the PKCE extension?

Authlete supports PKCE extension. Read more

Does Authlete support the PAR extension?

Authlete supports PAR extension. Read more

Does Authlete support the RAR extension?

Authlete supports RAR extension. Read more

Does Authlete support the JAR extension?

Authlete supports JAR extension. Read more

Does Authlete support the Authorization Endpoint endpoint?

Authlete supports Authorization Endpoint endpoint. Read more

Does Authlete support the Token Endpoint endpoint?

Authlete supports Token Endpoint endpoint. Read more

Does Authlete support the UserInfo Endpoint endpoint?

Authlete supports UserInfo Endpoint endpoint. Read more

Does Authlete support the Token Revocation endpoint?

Authlete supports Token Revocation endpoint. Read more

Does Authlete support the Token Introspection endpoint?

Authlete supports Token Introspection endpoint. Read more

Does Authlete support the Device Authorization Endpoint endpoint?

Authlete supports Device Authorization Endpoint endpoint. Read more

Does Authlete support the OpenID Connect Discovery Endpoint endpoint?

Authlete supports OpenID Connect Discovery Endpoint endpoint. Read more

Does Authlete support the OAuth 2.0 Authorization Server Metadata Endpoint endpoint?

Authlete supports OAuth 2.0 Authorization Server Metadata Endpoint endpoint. Read more

Does Authlete support the none token endpoint authentication method?

Authlete supports none token endpoint authentication method. Read more

Does Authlete support the client_secret_basic token endpoint authentication method?

Authlete supports client_secret_basic token endpoint authentication method. Read more

Does Authlete support the client_secret_post token endpoint authentication method?

Authlete supports client_secret_post token endpoint authentication method. Read more

Does Authlete support the client_secret_jwt token endpoint authentication method?

Authlete supports client_secret_jwt token endpoint authentication method. Read more

Does Authlete support the private_key_jwt token endpoint authentication method?

Authlete supports private_key_jwt token endpoint authentication method. Read more

Does Authlete support the tls_client_auth token endpoint authentication method?

Authlete supports tls_client_auth token endpoint authentication method. Read more

Does Authlete support the none prompt?

Authlete supports none prompt. Read more

Does Authlete support the login prompt?

Authlete supports login prompt. Read more

Does Authlete support the consent prompt?

Authlete supports consent prompt. Read more

Does Authlete support the select_account prompt?

Authlete supports select_account prompt. Read more

Does Authlete support the create prompt?

Authlete does not support create prompt. Read more

Does Authlete support the Refresh Token Rotation feature?

Authlete supports Refresh Token Rotation feature. Read more

Does Authlete support the OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature?

Authlete supports OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature. Read more

Does Authlete support the FAPI 1.0 Security Profile - Part 1: Baseline feature?

Authlete supports FAPI 1.0 Security Profile - Part 1: Baseline feature. Read more

Does Authlete support the FAPI 1.0 Security Profile - Part 2: Advanced feature?

Authlete supports FAPI 1.0 Security Profile - Part 2: Advanced feature. Read more

Does Authlete support the FAPI 2.0 Security Profile feature?

Authlete supports FAPI 2.0 Security Profile feature. Read more

Does Authlete support the FAPI 2.0 Message Signing feature?

Authlete supports FAPI 2.0 Message Signing feature. Read more

Does Authlete support the JARM feature?

Authlete supports JARM feature. Read more

Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.