OAuth: Open Authorization in Cybersecurity
Like 'oath' with a long O at the start.
OAuth stands for Open Authorization. Open Authorization is a standard that lets users grant third-party applications limited access to their resources without sharing passwords. OAuth 2.0 issues access tokens with defined scopes and lifetimes.
Why this matters in 2026
APT29 (Midnight Blizzard) used a malicious OAuth application with elevated tenant privileges to read Microsoft senior leadership email and source code in 2024. OAuth-app governance is now a discrete IAM-engineering discipline.
Read the related Decipher FileHow OAuth Is Used in Cybersecurity
Security engineers design OAuth flows to protect APIs and control third-party data access. Penetration testers exploit misconfigured OAuth scopes, open redirects, and token theft vectors. Architects choose the right OAuth grant type based on application type and trust level.
Read the full glossary entry: OAuth in Cybersecurity
Cybersecurity Roles That Work with OAuth
Related Cybersecurity Acronyms
Frequently asked questions
What does OAuth stand for?
OAuth stands for Open Authorization. Open Authorization is a standard that lets users grant third-party applications limited access to their resources without sharing passwords. OAuth 2.0 issues access tokens with defined scopes and lifetimes.
What is OAuth used for in cybersecurity?
Security engineers design OAuth flows to protect APIs and control third-party data access. Penetration testers exploit misconfigured OAuth scopes, open redirects, and token theft vectors. Architects choose the right OAuth grant type based on application type and trust level.
Where to go next
Three next steps depending on where you are. The first two are free.
Free · 2 minutes
Start with the AI Risk Score
Two minutes. Tells you how exposed your current role is to AI automation and which defensive moves carry the best return.
Start the AI Risk Score →Paid program · $147-$597
Aligned course: Career Transition
Capstone reviewed by the founder, published rubric, Ed25519-signed verifiable credential on completion.
View the course →Free account
Save your results and track progress
A free account stores your assessments, recommendations, and an exportable copy of your Career DNA. No card needed.
Create your account →Definitions are original explanations written for career development purposes. For authoritative technical definitions, refer to NIST, ISO, or the relevant standards body.