Bring Single Sign-On to your app with the OIDC standard on OAuth 2.0 — your app trusts the ID Token and Claims issued by PSS iD for authentication and authorization.
Full OpenID Connect support: Authorization Code + PKCE, Discovery and JWKS.
Users log in once and instantly reach every PSS Group app — less friction, less risk.
ID Tokens with claims like sub, email, roles, groups to drive authorization downstream.
GET /oidc/auth ?response_type=code &client_id=YOUR_CLIENT_ID &redirect_uri=https://app.example.com/callback &scope=openid profile email roles &state=xyz &code_challenge=... &code_challenge_method=S256