OpenID Connect flows

Depending on the application type you are building, you’ll receive from us the client id and client secret that is configured for the specific OpenID Connect flow. These flows are sometimes referred as grant types. They are not specific to the Salto KS platform, they are an implementation of the public OpenID Connect protocol which is also used by other systems on the internet. Libraries and frameworks that implement OpenID Connect protocol can also be used by the Salto KS platform. OpenID Foundation has a list of different OpenID Connect implementations https://openid.net/developers/certified/.

We recommend the usage of a client library because they handle different flows automatically and they will most likely be updated when the OpenID Connect protocol changes for any flow. This can happen if security vulnerability is discovered and protocol standards needs to be modified.