How-to guides

Task-oriented guides for integrating and operating an RP.

• Prove domain ownership — register production redirect hosts without a review step.
• Validate an ID token — verify the signature and the claims before trusting them.
• Call UserInfo — read the approved claims, on the OIDC and machine planes.
• Refresh tokens — keep access after the access token expires.
• Log out — RP-initiated logout, back-channel logout, revocation, and erasure notifications.
• Rotate the client secret — reissue a lost or compromised secret.
• Handle errors — OIDC, portal and machine-plane error codes.
• Delete or export an RP — tear the RP down or download its verifiable audit bundle.