Identity Flow Diagrams

Browse sequence diagrams of common identity and access-management flows.

Search Browse by Category

User Login & SSO Application & API Security Security Enhancements Others

OpenID Connect - Authorization Code Flow with PKCE

Recommended OIDC login flow where the client exchanges an authorization code for tokens and binds the exchange to a PKCE code verifier.

OpenID Connect - Implicit Flow

Legacy browser-based flow where tokens are returned directly in the redirect URI fragment. Deprecated in favour of Authorization Code + PKCE.

SAML 2.0 SP-Initiated SSO

A service provider redirects the user to an identity provider, which posts back a signed SAML assertion to establish a session.

OAuth 2.0 Authorization Code Flow

Classic three-party flow where a confidential client exchanges an authorization code for an access token.

OAuth 2.0 Authorization Code Flow with PKCE

Classic three-party flow where a client application exchanges an authorization code for an access token and binds the exchange to a PKCE code verifier.

No diagrams yet in this category.

OpenID Connect Discovery

How a Relying Party fetches the OpenID Provider's configuration document and public keys to bootstrap an OIDC integration.