SID-AUTH-03 — OIDC Gate for External Identity Providers
| Property | Value |
|---|---|
| Owner | platform |
| Category | technical |
| CSF Function | protect |
| Group | Authentication Controls |
Description
External OIDC ID tokens validated for gated registration/login flows. Validates issuer, audience, JWT signature via JWKS discovery, expiration with configurable clock skew. Caches validators per provider.