[k__]

Interesting, I always thought it was the other way around.

It would authenticate who you are, but you have authorize the people yourself later.

[babelfish]

OpenID Connect is built on top of OAuth2 and is the recommended solution for authentication.