52 Understanding OAuth Services

OAuth provides a method to exchange identity credentials for an access token. This token, in return, can be used for granting access of private resources in a user's account on one service provider site to a second, consumer site without having to divulge the identity credentials to the consumer site.

Oracle Access Management implements the OAuth Core 2.0 specifications to offer OAuth Services. This chapter describes the purpose and capabilities of the Oracle Access Management OAuth Services.

This section describes the following topics:

• About Oracle Access Management OAuth Services

• Understanding OAuth Services Authorization for Web Clients

• Understanding OAuth Services Authorization for Mobile Clients

• Understanding the OAuth Services Components

• About OAuth Services Tokens

• Understanding the Authorization and Authentication Endpoints

• Enforcing Access Control

• Understanding Mobile OAuth Services Server-Side Single Sign-on

• OAuth Services Plug-ins