Comparisons

OAuth 2.0 vs OpenID Connect vs SAML

Venn Diagrams · made in Skemio

Venn diagram showing OAuth 2.0, OpenID Connect, and SAML with overlaps covering token-based claims, SSO, and federated identity.
Venn diagram showing OAuth 2.0, OpenID Connect, and SAML with overlaps covering token-based claims, SSO, and federated identity.
Open it in SkemioMake your own

What it shows

  • OAuth 2.0 issues scoped access tokens for API authorization.
  • OpenID Connect adds an ID token identity layer right on top of OAuth 2.0.
  • SAML handles XML-based enterprise federated identity and single sign-on.

The takeaway

OAuth authorizes access, OIDC authenticates identity, and SAML connects enterprises.

More venn diagrams