![3rd-Party Authn/Authz ,[object Object]](https://image.slidesharecdn.com/3rdparthyauthnauthz-110921091515-phpapp01/75/3rdparty-authnauthz-1-2048.jpg?cb=1668865920)
![Google ,[object Object],[object Object]](https://image.slidesharecdn.com/3rdparthyauthnauthz-110921091515-phpapp01/75/3rdparty-authnauthz-2-2048.jpg?cb=1668865920)
![[object Object]](https://image.slidesharecdn.com/3rdparthyauthnauthz-110921091515-phpapp01/75/3rdparty-authnauthz-4-2048.jpg?cb=1668865920)
![Generic OpenID ,[object Object]](https://image.slidesharecdn.com/3rdparthyauthnauthz-110921091515-phpapp01/75/3rdparty-authnauthz-7-2048.jpg?cb=1668865920)
3rd-Party Authn/Authz
•0 likes•1,712 views
Report
Share
A brief overview of the popular 3rd-party authentication and authorization methods and implementations used in web apps.
More Related Content
What's hot
What's hot(13)
Similar to 3rd-Party Authn/Authz
Similar to 3rd-Party Authn/Authz(20)
Recently uploaded
Recently uploaded(20)
3rd-Party Authn/Authz
- 3. Facebook
- 5. Single identify throughout the Internet
- 6. Returns: identifier (and optional data)
- 8. Consumer “discovers” based on the URL
- 10. User authenticates with provider
- 11. Redirects to consumer Lots of hashy stuff going on here. Discovery varies V1 to V2.
- 13. OpenID V2 + AX
- 14. Single discovery URL for everybody
- 16. Returns: identifier and access token
- 18. Redirects User to Service
- 19. User authenticates and authorizes
- 21. Site gets access token from Service All implementations are service-specific. Hashy stuff varies V1 to V2.
- 23. Has both authentication and authorization endpoints
- 24. Access levels: read, read/write, read/write/private.