OpenID Connect (OIDC) is an authentication protocol built on OAuth 2.0. It lets an application verify a user's identity through an identity provider instead of managing passwords and password hashes itself. section 8.4.3
A Streamlit app can send users to providers such as Google, Microsoft, Okta, or Auth0. Configure the provider's client ID, secret, and metadata in st.secrets, then start sign-in with st.login. section 8.4.3
After authentication, the app can:
- Check whether a user is signed in with st.user.is_logged_in. section 8.4.3
- Read identity details such as the user's email through st.user.email. section 8.4.3
- End the session with st.logout. section 8.4.3












