OAuth 2.0 is an authorization framework that enables applications to obtain limited access to user accounts on an HTTP service. OAuth is a technical standard for authorizing users that helps make SSO possible. Learn how OAuth 2.0 works, and compare and contrast SAML vs. OAuth. OAuth 2.0 is an authorization protocol and NOT an authentication protocol. As such, it is designed primarily as a means of granting access to a set of resources, for example, remote APIs or user data. Learn how OAuth simplifies access to resources without compromising sensitive information. See examples of OAuth in action and how it differs from OIDC.