OAuth 2.0 is an authorization protocol and NOT an authentication protocol. As such, it is designed primarily as a means of granting access to a set of resources, for example, remote APIs or user data. OAuth is a protocol that allows users to grant access to their online accounts to third-party applications or websites without sharing their passwords. Learn about its history, security issues, types, and examples of OAuth in use. OAuth (open authorization) is an open-standard authorization framework that grants applications access to an end user’s protected resources. Learn how OAuth simplifies access to resources without compromising sensitive information. See examples of OAuth in action and how it differs from OIDC.