Tuesday, August 14, 2012

Small writeup on OAuth2.0

OAuth 2.0 is a new standard/technology that is being adapted by many organizations for Mobile application developments. And so Oracle used it in Oracle IDM 11gR2 release for Access Management Mobile and Social SSO. I have also seen companies using OAuth 2.0 technology in Gadget applications. So I just thought of doing a small write up on it. I have also recently read a nice post on OAuth2.0.

OAuth is an open authentication protocol which enables applications to access each others data. For instance, a game application can access users data in the Facebook Application. So user logs into Social sites and get access to other applications without need to provide credentials again.
Let me explain this with a simple diagram. 

Example of how OAuth 2.0 is used to share data via applications.

User access gaming application. It redirects user to login to Social Site say Facebook. User logs into Facebook successfully. Now the gaming application can access users data from Facebook.

OAuth 2.0 standard support various clients which access REST APIs. This includes calling out an enterprise application to the cloud or applications getting called from mobile devices.

Check out its specifications here.
The services that OAuth 2.0 support as of today are:


No comments:

Post a Comment