An authorization mechanism for delegating permission to another service without sharing a password.
An authorization framework that lets a resource owner delegate access permission to a third-party app without handing over a password. A common misunderstanding: OAuth is strictly about delegating permission -- authorization -- and on its own says nothing about who the person actually is. OpenID Connect was built on top of it to add that missing authentication piece.
© 2026 ITBGM