> For the complete documentation index, see [llms.txt](https://docs.objectsgrid.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.objectsgrid.com/documentation/usage-guide/authentication-and-authorization.md).

# Authentication and Authorization

ObjectsGrid Authentication and Authorization

## Summary

Authentication is the process of verifying the user's identity. It ensures that the person or computer accessing the platform is who they claim to be.

We currently support authentication through external [OpenID Connect](https://openid.net/) (**OIDC**) identity providers. [Google](https://developers.google.com/identity/openid-connect/openid-connect) is fully supported, while Apple integration is in progress. We also plan to add support for Okta in the near future.

Your mobile or web application must enable its users to sign in with at least one of the supported OIDC providers and obtain an **ID Token** from them. For example: <img src="https://1070699285-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiGv8sfcwqHyjfmlEv5MO%2Fuploads%2F8O3PpmSqBiTnuYWTISj2%2Fimage.png?alt=media&amp;token=c3cf22e4-c9cb-4cc0-9222-43dc24d856e2" alt="" data-size="line"><img src="https://1070699285-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiGv8sfcwqHyjfmlEv5MO%2Fuploads%2FIFa0i46ltaeadASovEkI%2Fimage.png?alt=media&amp;token=0dab246d-8db7-4d37-a233-8e32d48f9501" alt="" data-size="line">\
The ID Token serves as a trusted proof of successful authentication from the identity provider (**IDP**).

Next, your application will exchange the ID Token for an ObjectsGrid **Access Token**. This Access Token must be included in every ObjectsGrid API request thereafter, to authenticate and authorize access to the APIs.<br>

Authorization is the process of determining what actions or objects (resources) a user is allowed to access after they have been authenticated. It defines the user's permissions and access control. ObjectsGrid authorization is [OAuth 2.0](https://oauth.net/2/) compliant.

ObjectsGrid APIs access levels are managed using [Attribute-Based Access Control ](https://en.wikipedia.org/wiki/Attribute-based_access_control)(**ABAC**). ABAC is an advanced authorization model that grants or denies access to resources based on attributes associated with users, resources, actions, and the environment. \
The access level rules are defined in an ABAC policy.