What is OAuth?

A standard that lets one app get limited access to your account in another service without learning your password.

In plain English

Instead of giving an app your password, you approve a specific permission, such as reading your calendar. The service then issues the app a token that carries only that permission and can expire or be revoked. OAuth is about authorisation, meaning what an app may do. Signing a user in is handled by a layer built on top of it, such as OpenID Connect.

Example

A scheduling tool asks to read your calendar. You click Allow on the calendar provider’s own page, and the tool never sees your password.

Easy to confuse with

• Single sign-on (SSO): OAuth grants an app limited access. SSO signs a person in once for many apps.

Where you will meet it

This idea belongs to the subject area of these practice tests. We do not publish or predict real exam questions.

• GitHub GH-900 practice tests
• ISC2 CC practice tests

Related terms

• Single sign-on (SSO): Signing in once to reach many applications.
• API: A defined way for one piece of software to ask another for data or to do something.
• Least privilege: Give every person and system only the access they need to do their job, and nothing more.

Written and checked by the Be Ready Education team, last reviewed 2 November 2026. General study information, not professional advice. Providers change names and rules, so confirm details on the official documentation. Not affiliated with, endorsed by or sponsored by any certification vendor or exam body. Certification names, exam codes and product names are trademarks of their respective owners and are used only to identify the exam a practice product prepares for. Our questions are original and are not actual exam questions.