OAuth 2.0

An open authorization framework that enables applications to access resources on behalf of users without exposing their credentials.

What is OAuth 2.0?

OAuth 2.0 is the industry standard protocol for delegated authorization it allows a user to grant a third party application limited access to their account on another service without sharing their password. For example, OAuth 2.0 can allow an application to request limited access to specific Google account data without seeing the user’s Google password. For sign in use cases, OpenID Connect adds identity verification on top of OAuth 2.0. OAuth 2.0 defines a set of flows for different application types and use cases, and it is commonly paired with OpenID Connect for authentication. Understanding OAuth 2.0 is essential for any organization securing modern web and mobile applications.