Cross Domain · security identity
Client-Initiated Backchannel Authentication (CIBA)
Client-Initiated Backchannel Authentication is an OpenID Connect flow in which the application asks the identity provider to authenticate a user out-of-band, rather than redirecting a browser. The user approves on their own device while the application polls or waits for a callback. It is the flow you need when the party being asked is not sitting in front of the session making the request.
Also known as Client-Initiated Backchannel Authentication, OpenID CIBA.
Providers that carry CIBA 0
No provider in the catalog carries this standard as a tag yet. That is a statement about the catalog's tagging, not about adoption: a provider that implements CIBA and says so in its APIs.json profile appears here on the next build. Add or correct a listing.
Read from the API Evangelist standards directory. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.