OAuth 2.0
OAuth 2.0 is an authorization protocol that allows applications to request limited access to user resources without sharing passwords. It operates via access tokens, enabling secure delegation of permissions. OAuth 2.0 supports multiple grant types like Authorization Code Flow and Client Credentials Flow, making it ideal for web, mobile, and API security. Keycloak implements OAuth 2.0 for SSO, access control, and API protection, supporting OpenID Connect (OIDC), User-Managed Access (UMA), and PKCE for enhanced security. It is widely used in modern authentication frameworks.
Recommended content for you
What is adaptive multi-factor authentication (adaptive MFA)?
Adaptive Multi-Factor Authentication (MFA) is a scalable policy that improves organizational security by assessing potential risks during every login transaction and prompting users for additional…
Practical guide to Apache Kafka
Event-driven communication systems (Message Brokers) enable loose coupling between services and components within an organization or project while ensuring asynchronous communication, scalability, high throughput, reliability,…
What is Federated Identity Management (FIM)?
What is FIM and how does it work? One of federated identity management real life example is when you work at Company A, and you…
Looking for enterprise SSO solutions?
Learn more about our Keycloak powered, single platform to manage access across your entire organization.