What's the difference between OpenID and OAuth?

Question

I\'m really trying to understand the difference between OpenID and OAuth? Maybe they\'re two totally separate things?

Answer 1

I have read a lot of articles on this topic and found below link very useful to distinguish OpenId and OAuth. Basically we need to understand difference between id_token and access_token. This will help in distinguishing OpenId Authentication and OAuth Authorizarion.

My conclusion:

id_token = JWT Token

access_token = GUID string

https://nhsconnect.github.io/national-authentication/TechOverview_Artefacts.html#:~:text=A%20JSON%20Web%20Token%20(JWT,used%20during%20the%20authentication%20service.&text=An%20access%20tokens%20is%20a%20credential%20used%20to%20access%20protected%20resources.


https://www.youtube.com/watch?v=BdKmZ7mPNns

Youtube link OpenId time start: 08:10

Hope this well help.