- Client Initiated Backchannel Authentication is a protocol extension for OAuth 2.0, tailored for scenarios where - the client, such as a financial institution or IoT device, initiates the authentication process without direct user - interaction on the client's platform. This is useful for "decoupled" authentication experiences, where, for instance, a - user might authenticate on their smartphone when prompted by a smart TV app. In CIBA, once the client requests - authentication, the authorization server prompts the user on a previously registered device, such as their mobile phone. - Upon successful authentication, the authorization server sends a token back to the client. This flow provides a seamless - and secure user experience, especially in contexts where traditional OAuth 2.0 interactions might be cumbersome or impractical. -
-