oauth-2.0authorizationopenid-connectscopes

What would be a good consent description for the openid scope?


When signing in a user using OpenID, typically a consent screen is shown listing the requested scopes and a short description, e.g.:

What would be the description for the openid scope in this case? Or should it not even be shown on the consent page?


Solution

  • Usually something like this, since after authentication, one or more user identifiers are issued to access tokens sent to resource servers: