Solving Identity Management in Modern Applications: Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0

Appendix A: Glossary

The following is a list of terms and their definitions as they are used in this book.

Access Token  – In the context of OAuth 2.0 and OIDC, a security token used by an application to call an API.

Account  – A construct within a software application or service that usually contains or is associated with identity information and optionally privileges and which is used to access features within the application or service.

Application  – A software application that issues requests to a server.

Application Programming Interface (API)  – A software service interface that allows a client program to request resources or actions from the software service.

Authorization Code  – In the context of OAuth 2.0 and OIDC, an intermediary, opaque ...