Glossary: Monitoring Tools and the Identity Life Cycle

Authorization code flow

Also written: authorization code grant

The recommended OAuth sequence: the app sends the user to the authorization server, the user signs in and consents, and the app receives a code that it swaps for an access token. Current guidance pairs it with PKCE.

Where the book teaches it

Chapter 4: Federation and Single Sign-On

Related terms

OAuth (Open Authorization)Authorization code PKCE (Proof Key for Code Exchange)Implicit flow