OAuth2 is an authorization framework that grants restricted access to the protected resource. In this framework, the client delegates authentication to an authorization server and obtains the access token to grant access to an application or a web service. The client can be web applications, mobile phones, hand-held devices, and desktop applications.
While using the OAuth2 framework, the OAuth server validates users and grants access to the corresponding account of Privileged Access Manager. Here, Privileged Access Manager serves as the OAuth2 client.
In order for OAuth 2.0 to be used, the Client must first obtain its own credentials from the Authorization Server, a client id and client secret, in order to identify and authenticate itself when requesting an Access Token.The Client, such as a smartphone app, website, smart TV app, desktop programme, etc., initiates access requests using OAuth 2.0. This is the usual flow for the token request, exchange, and response:The Client submits an authorization request (authorization request) to the Authorization server along with the client id, client secret, scopes, and an endpoint URI (redirect URI) to which the Access Token or the Authorization Code should be sent.The Authorization server validates the Client's identity and confirms that the requested scopes are legal.