Token Exchange

An authorization framework that enables applications to obtain limited access to protected resources without exposing a user's credentials.

A credential issued after authentication that authorizes a client to access protected resources or APIs for a limited period.

A long-lived credential used to request new access tokens without requiring the user to re-authenticate.

A security token that grants access to protected resources solely by possession, without requiring additional proof of identity.

The process of verifying the identity of a user, application, or system before granting access to protected resources or services.

The process of determining what actions or resources an authenticated user, application, or system is permitted to access.