Authorization Grant Types
The following authorization grant types are supported:
-
Authorization Code - 3-legged-OAuth: This grant type is used when you want to obtain an authorization code by using an authorization server as an intermediary between the client application and the resource owner.
-
Assertion - 2-legged-OAuth: This grant type is used when you want to use an existing trust relationship expressed as an assertion and without a direct user approval step at the OAuth Authorization Server.
-
Client Credentials - 2-legged-OAuth: This grant type is used when authorization type is limited to the protected resources under the control of the client or to protected resources registered with the OAuth Authorization Server.
This information in this table provides the options for each grant type.
| Grant Type | OAuth Server | User Credential Required during Request | Trusted by Using Certificate | User Context in Access Token | Allowing Refresh Token | Browser Interaction |
|---|---|---|---|---|---|---|
|
Authorization Code (3–legged) |
IDCS, Azure, Okta, and Ping |
Y |
N |
Y |
Y |
Y |
|
JWT User Assertion (2–legged) |
IDCS only |
N |
Y |
Y |
Y |
N |
|
Client Credential (2–legged) |
IDCS only |
N |
N |
N |
N |
N |
For more information about grant types, see the product documentation for Integrating and Extending Oracle Content and Experience in Oracle Help Center.