https://oa.dnc.global/Definition-of-OIDC-scopes-and-generalities-on-their-use-by-applications.html The extent of the authorization is defined by the Scopes. This is probably the most open point of the standard and therefore a difficult concept to master for the developer of an application using OpenID Connect. The ability to modulate authorization extent based on the client application and the end user is an exceptionally interesting feature of OAuthSD. We often see in OIDC a simple SSO, but it misses all the power of the device: the JWT identity token combines inseparably and in a (…) en SPIP - www.spip.net https://oa.dnc.global/local/cache-vignettes/L144xH124/arton170-ae222.jpg?1794175823 https://oa.dnc.global/Definition-of-OIDC-scopes-and-generalities-on-their-use-by-applications.html 124 144