The Web SSO Standard OpenID Connect: In-Depth Formal Security Analysis and Security Guidelines

Daniel Fett, Ralf Kuesters, Guido Schmitz

Web-based single sign-on (SSO) services such as Google Sign-In and Log In with Paypal are based on the OpenID Connect protocol. This protocol enables so-called relying parties to d…