---
title: CIBA grant
description: Client Initiated Backchannel Authentication (CIBA) is an extension to OpenID Connect that improves the end-user experience during authentication and authorization in a federated environment.
component: pingfederate
version: 13.1
page_id: pingfederate:introduction_to_pingfederate:pf_ciba_grant
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/introduction_to_pingfederate/pf_ciba_grant.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 5, 2022
section_ids:
  related-links: Related links
---

# CIBA grant

Client Initiated Backchannel Authentication (CIBA) is an extension to OpenID Connect that improves the end-user experience during authentication and authorization in a federated environment.

Like OpenID Connect, CIBA is an authentication flow, governing how clients are identified and granted access. With CIBA, user consent can be requested through an out-of-band flow. For example, when making an online purchase, CIBA improves user experience because the customer's browser will not have to redirect to a financial institution for authorization. Instead, the customer receives a push notification from the financial institution's mobile app to complete authorization. This allows the customer to avoid confusing browser redirects.

## Related links

* [Client Initiated Backchannel Authentication (CIBA)](../administrators_reference_guide/pf_ciba.html)

* [Client-initiated backchannel authentication endpoint](../developers_reference_guide/pf_ciba_endpoint.html)