An open standard that lets users grant an app limited access to their data on another service without sharing their password.
When an app asks to connect to your calendar or offers a sign in with a large provider button, it is often using OAuth, typically version 2.0. Instead of handing over your password, you are redirected to the provider, you log in there, and you approve specific permissions, called scopes, such as read-only access to your contacts.
The provider then gives the app an access token that works only for those permissions and can be revoked at any time. OAuth handles authorization; OpenID Connect is a layer on top that adds standardized authentication, telling the app who you are. Implementing OAuth correctly requires care, including validating redirect addresses and protecting tokens, since mistakes can expose user accounts.
Application Programming Interface: a defined set of rules that lets one piece of software request data or services from another.
API KeyA unique code that identifies an application or user when it calls an API, used to control access, track usage, and apply billing.
AuthenticationThe process of verifying that a user, device, or system is who or what it claims to be.
JSON Web TokenA compact, signed token format used to securely pass identity and permission claims between a client and a server.
Single Sign-OnAn authentication method, known as SSO, that lets people log in once and access many applications without signing in to each separately.
A step-by-step access review for shared drives, SaaS apps and admin rights, so every person and app has only the access they actually need.
The Microsoft 365 admin settings to change first, in priority order, with the exact admin center location for each one.
What AI guardrails are, the 3 layers every AI app needs (input filters, output checks, permission limits), and a step-by-step plan to add them.