Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term Authorization Server

Training Camp • Cybersecurity Glossary

What is Authorization Server?

Authorization server: the OAuth 2.0 and OpenID Connect component that authenticates users and issues access, refresh, and ID tokens to clients.

Glossary > Identity & Access Management > Authorization Server

Understanding Authorization Server

An authorization server is the component in the OAuth 2.0 and OpenID Connect frameworks responsible for authenticating the resource owner and issuing access tokens, refresh tokens, and ID tokens to client applications. Defined in RFC 6749, it exposes endpoints such as the authorization endpoint and token endpoint, and it enforces consent and scope decisions before granting access to protected resources. It is distinct from the resource server, which validates those tokens to serve protected APIs.

Learn More About Authorization Server:

Ready to Get Certified?

Authorization Server is one of the topics you'll master in the Security+ Boot Camp.

Security+ Boot Camp →