A high-level architecture diagram that explains how a web application uses the SDK library to perform a two-legged authentication flow for OAuth 2.0 and OpenID Connect 1.0. This two-legged flow uses the client credentials grant type.

After the user requests a protected URL, the request is forwarded to the web application. The web application uses the SDK to submit the Client ID and Secret to Oracle Identity Cloud Service for validation. Oracle Identity Cloud Service issues an access token to the web application, and then the web application displays content for the user.