Client Initiated Backchannel Authentication
CIBA is an OpenID flow where authentication happens on a separate device from the one requesting access. For example, a call center agent can trigger a push notification to the customer's phone, and the customer approves there. It enables decoupled authentication for scenarios where the user is not in front of a browser.