OIDC (OpenID Connect) is a standard for login. It lets users log in to many systems with the same login, for example from Microsoft. Notes 2026 can use OIDC.
OIDC stands for OpenID Connect. It is an open standard for login. It lets a user log in to many systems with the same login. If you have seen the button "Sign in with Microsoft" or "Sign in with Google", you have used OIDC.
How does it work?
Three parties are involved:
- The user, who wants to log in.
- The system the user wants to enter. It could be Notes or Domino.
- The login service that knows the user. It could be Microsoft Entra ID or Domino itself.
The system sends the user on to the login service. Here the user logs in, preferably in two steps. The login service sends a proof back that the system trusts. The system never sees the user's password.
OIDC and OAuth
OIDC is built on top of another standard called OAuth 2.0. OAuth is about what an app may do. OIDC adds who the user is. That is why they are often used together. The proof from the login service is a small digital ticket that is signed. It has a short lifetime, so a stolen ticket quickly becomes worthless.
Why is it good?
- Users have one login and need to remember fewer passwords.
- IT can control login in one place, for example require two steps for everyone.
- When an employee leaves, you close one login, and access is gone everywhere.
OIDC in HCL Notes and Domino
Domino has been able to use OIDC for web for some years. With Notes and Domino 2026 the Notes client can also use OIDC for login. Then users can log in to Notes with the same login as everywhere else in the company. The user's Notes ID still exists and is used for encryption and signatures.
It takes a little setup on the Domino server and at the login service. We are happy to set it up as part of our Domino operations and Notes support. Read more about what is new in Notes 2026 and Domino 2027.