OpenID Connect (OIDC) Authentication

OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0 that developers use to authenticate users and workloads by exchanging identity tokens. On SAP BTP, it is used to establish trust between services and identity providers — for example, configuring token policies in the SAP Authorization and Trust Management service or accessing a Kyma instance via kubectl through an OIDC-based kubeconfig. It also underpins secure service-to-service communication, such as enabling external workloads on SAP BTP to authenticate against Google Cloud Platform services using OIDC tokens instead of long-lived credentials.