name: OIDC
full_form: OpenID Connect
context: OAuth 2.0 Authorization code flow [16] with additional security enhancements proposed by [15] is used as the OpenID Connect flow in the proposed solution. The MCPTT Client native application in the UE is a "public client" incapable of maintaining the confidentiality of their credentials. When a public client utilizes the Authorization Code Grant to authenticate with the OIDC server, they are susceptible to the authorization code interception attack. Once the user (i.e. the resource owner) authenticates, the OIDC server provides MCPTT Client with an authorization code through a browser redirect HTTP message. The client then sends the authorization code to the OIDC Server and gets an access token in return. The Redirection URI typically uses a custom URI to communicate with the native application. The interface between the browser and the native app is based on callbacks (handlers). This path is unprotected and could be attacked by a malicious application (native application) in the UE.
description: OpenID Connect (OIDC) is an authentication protocol built on top of OAuth 2.0. It allows clients to verify the identity of users after authentication has been performed by an authorization server. This enables secure access to applications and resources.
explanation: OIDC is specifically designed for user authentication and relies on OAuth 2.0 for authorization, making it a core component within authentication protocols used in telecommunications.
section_title: 7.2.1.1 	OpenID Connect Authorization Code flow using Proof Key for Code Exchange
biotag_Context: O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Procedure,I-Procedure,O,O,O,O,O,O,B-Service,O,O,O,O,O,B-Device,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Procedure,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Procedure,O,O,B-Service,O,O,O,O,O,O,O,O,O,B-Protocol,O,O,O,O,O,O,O,O,O,O,B-Procedure,O,O,O,O,O,O,O,O,O,O,B-Parameter,O,O,O,O,B-Parameter,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O
biotag_Description: B-Procedure,I-Procedure,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O