A step by step walkthrough of the OpenID Connect authorization code flow and how it is implemented in Symfony: redirect to the identity provider, callback, code exchange, session creation, state, PKCE, nonce, id_token validation, key rotation, federated logout. Based on a contribution to the framework, for anyone integrating any OIDC identity provider without repeating the classic mistakes.