Terms

Question 1

Authentication

Answer 1

Login + Password (who you are).

Question 2

Authorization

Answer 2

Permissions (what you are allowed to do).

Question 3

Service Provider (SP)

Answer 3

An application that provides a service to the end user. Accepts identity from an identity provider.

Question 4

Identity Provider (IdP)

Answer 4

A trusted service that enables users to access other websites and services without logging in again.

Question 5

OAuth (Open Authorization)

Answer 5

An open protocol to allow secure API authorization in a simple and standardized way from desktop and web applications.

Question 6

OAuth 2.0 Authorizaton Framework

Answer 6

Used for authorizing applications to access Force.com resources (via SOAP, REST or Chatter REST APIs) without revealing password or other credentials to those applications. With or without an end user.

Question 7

OpenId Connect

Answer 7

OpenID Connect is a simple identity layer on top of the OAuth 2.0 protocol used for authentication.

Question 8

OAuth Flow - Web Server

Answer 8

Allows users to authorize the web application to access data (think dataloader).
Grant Type: Code.