Solving Identity Management in Modern Applications: Demystifying OAuth 2, OpenID Connect, and SAML 2

Appendix A: Glossary

The following is a list of terms and their definitions as they are used in this book.

Access Token – In the context of OAuth 2 and OIDC, a security token used by an application to access protected resources such as an API.

Account – A construct within a software application or service that usually contains or is associated with identity information and optionally privileges and which is used to access features within the application or service.

Application – A software application that issues requests to a server.

Application Programming Interface (API) – A software service interface that allows a client program to request resources or actions from the software service.

Authorization Code – In the context of OAuth 2 and OIDC, an ...