The core idea

An identity layer on top of OAuth.

OpenID Connect adds a standard way to prove who the user is to OAuth's access-granting — turning 'access my data' into 'log me in.'