Definition
OAuth 2.0 is an open authorisation standard that allows a user to grant a third-party application limited access to a resource - for example, 'grant application X read access to my electricity data' - without sharing their password. OAuth 2.0 defines various flows suited to different use cases: Authorization Code Flow (for websites and mobile apps), Client Credentials (for service-to-service), and Implicit Flow (deprecated). OAuth 2.0 is the building block underlying modern sign-in experiences and SSOSingle Sign-On - authentication mechanism allowing users to authenticate once and access multiple systems. systems. OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0 that adds authentication - who is the user - on top of authorisation - what is the user permitted to do. Microsoft Entra IDMicrosoft's cloud-based identity and access management platform - formerly known as Azure Active Directory (Azure AD). (AzureMicrosoft's cloud platform - strong in the enterprise segment, especially where Office 365 and Active Directory are already in use. AD), Google Identity, and Okta all implement OAuth 2.0 and OIDC. In the energy sector, OAuth 2.0 is used to secure APIs between KISCustomer Information System - the core system at power suppliers and grid companies for customer management and billing., MDMMeter Data Management - system for collection, storage, quality assurance and distribution of metering data from the electricity grid. and ElhubNational hub for metering data and market processes in the Norwegian electricity market. integrations, and for partner APIs that give power suppliers controlled access to grid companyCompany that owns and operates electricity grids and is responsible for power supply to end users. data.