Authorization Server

Definitions

1. The component in an authorization framework that authenticates users, obtains consent, and issues tokens to clients. In OAuth-based systems, the authorization server is central to trust and token policy.

   In plain English: The system that authenticates users and issues authorization tokens.

   Example: "The API trusted tokens only if they were issued by the designated authorization server."

Related Terms

• Authentication
• Implicit Grant
• OIDC
• Access Token
• Authorization Code
• Claims-Based Identity
• Code Flow
• Consent Phishing
• FedRAMP
• Group Membership