The Winter ’14 release includes OpenID Connect Authentication Providers, allowing your org to be an OpenID Connect Client, and leverage an Authorization Server for user login. Let’s take a look at how this works:
If you want to walk through the protocol in detail, there’s an excellent, detailed description on Google’s Developer site.