Integration flow overview

Welcome to the Oten IDP Developer Integration Guide! This page provides a comprehensive overview of the entire integration process, giving you a roadmap before diving into the detailed implementation steps.

🎯 What You'll Learn

This overview covers:

• Complete integration workflow from setup to production

• Step-by-step roadmap with clear milestones

• JAR (JWT-Secured Authorization Request) requirements - CRITICAL for Oten IDP

• Different client types and their specific implementation paths

• Security considerations and best practices

• Testing and deployment strategies

🚨 Before You Start - JAR Requirement

CRITICAL: Oten IDP requires JAR (JWT-Secured Authorization Request) for ALL authorization requests.

Key Points:

• ❌ Traditional OAuth query parameters are REJECTED

• ✅ All OAuth parameters must be in a signed JWT

• Choose HS256 (client secret) or EdDSA (key pair)

For complete JAR details, see JAR Requirement

Here's your complete journey from start to finish:

Total Estimated Time: 3-4 hours for basic implementation

Choose your path based on what you're building:

Examples: Traditional websites, admin panels, internal tools

Go to: Server-Side Integration Guide

Examples: React app, Vue app, Angular app (no backend)

You Need: A small backend service to handle JAR creation Go to: SPA Integration Guide

Examples: iOS app, Android app, React Native

You Need: Backend service + deep link setup Go to: Mobile Integration Guide

Oten requires signed requests for security. Choose your signing method:

For beginners and development

How it works: Use your client secret (password) to sign requests

For production and public apps

How it works: Generate a key pair, keep private key secret, register public key

Start with Go + Client Secret method

Use EdDSA for better security

Question 1: Is this for production?

Question 2: Do you have a backend server?

Simple 5-step process:

Result: User is logged in and can use your app!

Choose your path:

Go with Client Secret - Easiest path, 1-2 hours

Choose Your Library - More setup needed, 2-4 hours

Key Pairs Setup - Most secure, requires key management

Next: Step 1: Choose OAuth Library