The service used to provide authorization between the Identity Provider (IdP) and application is OAuthv2. OAuthv2 is an open standard for authorization that enables applications to securely access resources from an IdP without having to manage the user credentials. OAuthv2 provides the IdP with the ability to grant limited access to its resources without having to share the user's credentials. Active Directory Federation Services (ADFS) and SAML are also commonly used for authorization, but OAuthv2 is the most widely used protocol for providing authorization between an IdP and an application.