Does OpenID Connect support the following SSO-like scheme:
- Both website S and some meta-website M support login using OpenID Connect, e.g. with a Google account. Is it possible for M to access a user's data at S, with the user being authenticated for both services with the same 3rd party account (e.g. Google)? So M should be able to make authenticated requests to the API of the website S, with the identity of a user logged in with e.g. his Google account.
- If yes, how would the workflow look like? (interactions between the involved parties, tokens to be obtained, ...) If not, are there other technologies which should be used for this case?
What I found so far, was to how to let a user authenticate at M using his/her account at S, but not using the account at another, 3rd organization.