OIDC Federation Quiz

What you'll be asked

1. In the context of OpenID Connect (OIDC), what is the primary role of the ID Token?
2. Which of the following describes the correct flow of an Authorization Code Grant in OIDC?
3. What is the purpose of the 'nonce' parameter in an OIDC authentication request?
4. When a Relying Party (RP) receives an ID Token, what is the most critical security validation step it must perform before trusting the claims?
5. In a scenario where a client uses the Authorization Code flow with PKCE, why is the code_verifier used during the token exchange?

Answers and explanations come after you submit.