Introduction to OIDC - Digital-Platform-Services/My-NS-Account GitHub Wiki

Home

Purpose

The purpose of this document is to help Government of Nova Scotia Departments and Agencies to successfully integrate their program’s on-line service applications with My NS Account.

Scope

This integration guide includes an overview of My NS Account and its services, explains how federated authentication works, provides information to help departments make informed architecture and technology choices, and outlines all of the major steps required to successfully integrate an on- line service application into the federation.

Audience

This document is primarily targeted toward application architects, developers and testers who will be responsible for integrating an on-line service application into the Federation. It may also be of value to other technical stakeholders such a security, network and infrastructure architects.

References

Source URL
[OIDC] http://openid.net/specs/openid-connect-core-1_0.html
[iGov.OIDC] https://openid.bitbucket.io/iGov/openid-igov-profile-id1.html
[iGov.OIDC latest] Aug 2023 https://openid.net/specs/openid-igov-openid-connect-1_0-04.html
[iGov.OAuth2] https://openid.net/specs/openid-igov-oauth2-1_0-02.html#rfc.section.3.1.7
[iGov.OAuth2] latest Aug 2023 https://openid.net/specs/openid-igov-oauth2-1_0.html
[CATS 3.0] OpenID Connect 1.0 Deployment Profile https://canada-ca.github.io/CATS-STAE/oidc1-en.html
[CATS 3.0] Latest doc 2024 Feb https://canada-ca.github.io/CATS-STAE/oidc1-en.pdf
[RFC7523] JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants. https://tools.ietf.org/html/rfc7523
[OIDC Confidential Client Auth Request ] The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR) https://www.rfc-editor.org/rfc/rfc9101.html
[JSON Web Signature (JWS)] https://www.rfc-editor.org/rfc/rfc7515.html
[JWE Encryption] JSON Web Encryption (JWE) https://www.rfc-editor.org/rfc/rfc7516.html
[Confidential Client Token Request] https://openid.net/specs/openid-igov-oauth2-1_0.html#name-requests-to-the-token-endpo