OAuth
Open Authorization
A standard that delegates access to resources without sharing credentials.
Open Authorization is a framework for delegated access, letting one application act on a resource on a user's behalf without exposing the user's password. It issues scoped access tokens so a third party receives only the limited permissions granted, supporting least privilege. OAuth handles authorization, not authentication, which is a frequent point of confusion: OpenID Connect adds an identity layer on top of OAuth to verify who the user is. Common pitfalls include overly broad scopes, leaked tokens, and missing validation of redirect URIs.
Authorization, not authentication: delegated access via tokens ("let this app act for me") without sharing your password.
- SAMLSecurity Assertion Markup Language
- AAAAuthentication, Authorization, and Accounting
- PIVPersonal Identity Verification
- TACACS+Terminal Access Controller Access Control System Plus
- CAPTCHACompletely Automated Public Turing Test to Tell Computers and Humans Apart
- CHAPChallenge Handshake Authentication Protocol
Looking OAuth up is step one. Getting tested on it is step two.
A free account opens all 4 Domain 1 objectives, 271 exam-style questions with a lesson and a lab on each, a placement check that skips what you already know, and a dated plan. No card.
Not affiliated with or endorsed by CompTIA.