Abstract / scope
This document specifies the method for an application to:
- obtain OAuth tokens in a moderately secure manner for access to protected data;
- use OpenID Connect (OIDC) to identify the customer (user); and
- use tokens to access REST APIs in a moderately secure manner.