🛡️

Authentication

Authentication, OAuth 2.0, OIDC, SSO and Keycloak

Authentication vs authorization?

Authentication verifies identity; authorization determines what that identity is allowed to do.

What is SSO?

Single sign-on lets a user authenticate with an identity provider and access multiple participating applications, subject to session and policy rules.

What is OAuth 2.0?

OAuth 2.0 is an authorization framework for granting limited access to resources. It is not, by itself, an identity protocol.

What is OIDC?

OpenID Connect adds an identity layer on top of OAuth 2.0, including ID tokens and standardized identity information.

What is Keycloak?

Keycloak provides identity and access management features such as sign-in, SSO, federation and token issuance.

Related: Browse all topics