Login with Web app Client Identity provider ———————— ———————— ———————— HTTPS connection → ← HTTPS connection list of providers → pick a provider HTTPS connection → ← HTTPS connection ← request credentials provide credentials → check credentials ← certificate of identity ← certificate of identity