OAuth 2.0 and OpenID Connect (in plain English)

Developer Advocate Nate Barbettini breaks down OpenID and OAuth 2.0 in Plain English. NOTE: This video is from 2018 and contains some information that is now out of date, mainly the content around the OAuth Implicit Flow.
Check out our video course! The Nuts and Bolts of OAuth 2.0 oauth2simplified.com/course
Learn more about OAuth at oauth.net
Get the book: OAuth 2.0 Simplified amzn.to/36HAGoS
Find Nate's slides here: speakerdeck.com/nbarbettini/o...
Sign up for our newsletter! a0.to/zeroindex

[@user-kx8qb8gr1f]

5 Years old video and still so relevant and precise to date! Nothing beats this video in explaining OAuth and OIDC

[@ciroformenton]

You stole my words...

[@watherby29]

​@@ciroformentonyou too

[@Nab_001]

you too (1)@@watherby29

[@ABHISHEK0058]

@@watherby29 you too

[@adebiyial]

He not only knows his stuff, but he also knows how to teach it. That's a rare and high-profile combination.

[@hsharma3933]

It’s a hallmark of subject matter mastery. I believe it was Einstein that said, “…(paraphrased) if you can’t explain rocket science to a child, you don’t understand it well enough.”

[@terrencemasuku8909]

This guy is an excellent teacher. Wow! I am very honored and grateful

[@swagatopablo]

@H Sharma well, he explained it to a room full of software developers, who, I assume, already have some experience in Web development, not to a room full of nursery kids.

[@hsharma3933]

@@swagatopablo that’s not really the audience. KZbin viewers are the audience. And he took that into account when he was delivering his lecture.

[@masoomsanadi]

@@hsharma3933 very well quoted (eyenstine 🙂 my spelling)

[@radioactive5271]

RIP to those who missed this video thinking that its an hour video & went for 10 min videos.

[@szilardfineascovasa6144]

Now I get it.

[@mj2068]

true dat. really really good video

[@AasmundNrsett]

This lecture summarised everything I have spent 20 hours googling in one hour. Fantastc!

[@OktaDev]

This comment means a lot as that is exactly the goal of this video. Thank you for your feedback.

[@somnathroy102]

Now seeing a 2 month of comment i can feel safe following this video as it seems to be still relevant.

[@eduardgorte8241]

Same

[@amdel2020]

More than justifies it's title of "in plain English". Brilliant explanation. Sets the benchmark for how to explain things.

[@nbarbettini]

Thanks for your kind words!

[@SendhilKumarRamalingam]

I couldn't agree more, Thanks Nate

[@_ng_BLADE_9478]

P

[@masoomsanadi]

this is also important or else many of times don't feel like watching because of english accent (take positively)

[@CraftyFella]

Finally.. someone has explained this in a way I can understand.. Thanks Nate for this presentation.

[@ujjwaldaga1440]

true that

[@MegaBig60]

Totally agree on that. I had been scratching my head over this OAuth and OpenID stuff.

[@mukhtharak2043]

Where can I find this presentation slides?

[@manmohitsingh9813]

@@mukhtharak2043 Check description of the video

[@pratikkamat8148]

totally agreed!!

[@brittlindgren1443]

Things that I really appreciated about this video 1. Introduced workflow without any or with minimal technical terms 2. Introduced the terminology and explained in simple terms 3. Went back to the workflow and incorporated the terminology with the workflow 4. Repeated questions from the audience so that those of us watching the video knew what the question was What a great video!!! Nate did a great job of teaching this material!

[@nbarbettini]

I appreciate the kind words. Thanks for watching! I'm glad it was helpful!

[@Kingside88]

May I add 5. not beeing stupid funny and translate the terminilogy in stupid analogy

[@xerxius5446]

You know what they say, If you can't explain it simply, you don't know it. This guys knows his stuff. bravo!

[@debanjanbarman7212]

not true for everyone.

[@masoomsanadi]

@@debanjanbarman7212 u r also right

[@davidpigman7382]

I'm a principal architect on a fortune 500 SaaS ERP implementation. My challenge is not only for myself to understand OAUTH 2.0, but also be able to explain this to stakeholders. This video does precisely this, incredible presentation. Thank you.

[@masoomsanadi]

after ur comment a year ago. i am in that spot of explaining to stakeholders. 🙂

[@2510viv]

This is by far the best video to understand OAuth and OpenIDConnect.. Nate is an outstanding teacher!

[@alekhsharma3590]

One of the best 1 hour i have ever spent on this app. Extremely useful, easy to understand.

[@RamGorre]

There is no better video than this one to understand OAuth and OpenID Connect. You can bet on it.

[@run-forrest-run]

I watch this video every 1.5 years to refresh. Remember guys. ID token is always a JWT token and is a result of authentication. Access Token is a result of authorization and can be a JWT token but doesn’t necessarily have to be.

[@OktaDev]

Many of us also watch this video periodically. Nate did an amazing job! 🤩

[@noble9944]

Why can't university lectures be as interesting as talks like these. This is great, thank you.

[@jerrybracke597]

Imagine this bright guy explaining this stuff to a room of immature 19 year olds. Not just once, but year, after year, after year. Its like keeping a killer whale in a basin, he ll die from boredom. Theres an old saying that goes; those who can, do, those who cant, teach. he can.

[@djzenma]

I usually never comment, but this was an amazing talk. He not only explained how the protocols work, but also their history, the bad solutions that the companies tried before these protocols were created, and how OAuth and OIDC solved these problems and standardized authentication and authorization in the web. Love it!

[@OktaDev]

Thanks for leaving this comment. It means a lot. We hope to see you around in our other content :)

[@BlackMamba1969]

I've just used Oauth 2.0 and OpenIdConnect to connect on youtube thru my Google acount to click "I like it" to this video. Really great presentation. Thanks.

[@nbarbettini]

Nice real world example!

[@shwethab7950]

I was scratching my head when I used to hear the word OAuth. Now I clearly understood the OAuth basics. Thanks for explaining with this much of clarity.

[@ivangutowski-smith5590]

now THIS: is how you do a presentation, clear, and build up the presented information as you teach it. The one thing that is so small, but a sign of a fantastic presenter: 26:30 a guy asked a question, Nate repeated it back to summaries he understood it welll - and for us watching a recording - we could hear the question... So professional, impeccable presentation and clear content.

[@nbarbettini]

Thanks for the kind words. I'm glad the presentation has been useful for lots of folks!

[@RajeevMC]

It is worth spending one hour on this video. Simple and powerful!!!

[@nbarbettini]

Thanks for spending an hour nerding out about OAuth with me!

[@cpgupta123]

I came across this video as I wanted to learn OAuth and OpenID to answer 10 questions in a quiz. Trust me that after watching this video, I answered all of them correct. I had no clues how t even answer 1 singe question before watching this video. MAN..you are just awesome. Thanks a ton !

[@lahvoopatel2661]

Still the best lecture on oauth and oidc after 4 years

[@VishnuDixit]

Just outstanding! The world owes you one

[@OktaDev]

Thanks for watching!

[@berrec2650]

OMG finally, after reading all the Google stuff and reading other documentation and watching videos for months on and off, I finally got it. It might be 4 years old, but thanks so much for putting OAuth V 2 so simple and easy to understand, also thanks for the great tools, just amazing..........

[@alexanderwitte9919]

I just explicitly logged into youtube to like this video. Thanks so much for putting this talk together and demystifying this stuff.

[@pegahut]

I just watched half of it and can't stop myself commenting. I knew Oauth before but I always have a missing piece in the puzzle. I had to unlearn to relearn in the perfect way. Awesome presentation and explanation. you got a skill !! Glad I found this video

[@jasonscheiwiller860]

I've lost count of how many confusing articles I've read online about this. Thanks for making it much easier

[@stevepassas7697]

26:40 someone asks a question. You repeat the question so we can all hear it. Excellent. I can't tell you how many times someone answers the question and we're all left trying to piece together the question from the answer. Thank you.

[@nbarbettini]

I'm always frustrated by that as a viewer, so I try hard to repeat whenever I can. I don't always remember but fortunately I did in this case.

[@sidpradhan7618]

wow this is one of the best vidoes on Auth 2.0 and Open ID Connect. I had watching many other vidoes and still did not understand Auth but this video has enlighted me. Thank OktaDev

[@StephenBeale]

16:15 terminology section - very helpful 21:00 key part of process

[@amoghskulkarni]

Nate, you have transformed my understanding of Oauth 2.0 and OIDC for good. I cannot thank you enough. Keep doing the good work! :)

[@nbarbettini]

Thanks for the kind words! I'm glad the talk helped!

[@jankowalski2652]

The best explanation of OAuth and OpenID connect I saw on the internet (including paid ones). Respect!

[@ruthlessluder]

You know you're a good teacher when a stupid person like me understands your lecture completely after watching it the first time!

[@akillercaterpiller]

Very few people have the ability to deliver complex information in an understandable and concise way. You have this ability, Nate. Thank you.

[@mortgaughaleb]

Honestly I implemented the both protocols before attending this video but really, such explanation should be included as a video in the protocols tutorials, nobody could eliminate the confusion in this way. Nate you're very amazing instructor.

[@lipikamajumdar9219]

This is one of the best content to understand OAuth 2.0 & OpenID Connect. Thanks for sharing it.

[@pratiks3]

Wicked! Even if you know Oauth 2.0, it's worth watching the entire presentation to get a deeper understanding of why it's so prevalent!

[@EhsanAmini]

You've only got to watch the tons of other tutorials out there and wade through the reams of obscure and perplexing documentation to really appreciate what a brilliant job this presentation does of explaining this cryptic jargon. Thanks a zillion! Oh if you only did another such presentation on general relativity and one on quantum mechanics.

[@shobhitmittal77]

The title should be "Everything you ever wanted to know about OAuth". Thanks much Nate... superbly explained.

[@LTEVideoTutorials]

Best explanation about oauth on internet. I am saving this video for future. Thanks 😊

[@mgysmt]

When he introduced the topic "what is the problem that it solves" I knew this was gonna be a very good material. (Then turned out to be excellent.)

[@vivekmit]

One of the best session on youtube of oauth + openId.

[@ShirazHazrat]

This man deserves an award. Great presentation!

[@gorancogic5385]

I watched this video like 4-5 months ago and all the knowledge went by me. Got a job and there we so many problems regarding authentication/authorization and understanding how it works. I decided to watch this clip again and it all suddenly clicked. Incredible video. Thanks a lot.

[@mikopanjean8756]

I've seen a lot of explanations and didn't understand the concept. FINALLY a very good expansion made me understand the concept . thank you!!

[@andresanper]

Great explanation and demo on OAuth2 and OpenId Connect. Thank you!

[@miguelakira]

Excellent video! I've been banging my head to the wall for the last couple days, until i saw your presentation. Can't praise you guys enough! Thanks!

[@ChetanAccount]

I have seen/red multiple tutorials was never understood open id connect so well . Everybody explains oauth correctly but no one i came across has explained open id connect so well. Awesome job . Thank you !

[@DevMS007]

watched complete video..totally worth spending 1 hour..easy explanation and covered concept in details.

[@nbarbettini]

Thanks for watching!

[@sreekantn9830]

Absolutely brilliant - Watching it nearly after 2-years you presented, but nothing comes close to presenting it this well. It is not easy to explain complex concepts in simple terms, but you managed it pretty well Nate. Thank you for the session and sharing the content.

[@nbarbettini]

Thanks for watching! And thanks for the kind words. :)

[@Oduig]

Best explanation of OAuth2 and OpenID Connect on the internet. Thank you.

[@colza1025]

Brilliant explanation. To anyone who is wondering why this video is so long, this video not only explains OpenID, but also the login flow, OAuth, and all the granularity while executing in code. After watching this, you will get a very solid understanding of how to implement login flow.

[@vikasneema7558]

After witnessing this, I was so impressed that I decided to pause my exploration of OAuth/OpenID. It's truly fantastic.

[@devlondres]

Excellent content. In simple and clear terms. Thank you so much Nate and Okta.

[@OktaDev]

Thanks for watching! Glad to hear you found this content helpful.

[@desertfox9613]

Wish I went straight to this video to learn about this.

[@ramyfarid2296]

Thank you! This is the cleanest and most t0-the-point explanation I have seen on OAuth and OpenID Connect

[@ChaitanyaDevavarapu]

Excellent presentation. So simple, crisp and clear. For anyone who want to understand what the heck is OAuth2 and OpenID Connect, this is the best presentation to go.

[@IsakSavo]

Absolutely great presentation. Been playing around with oauth and openid connect for one of our products but not really understanding what all the pieces meant. Now I do. Thanks!

[@kapilricky]

after 12 years of my career, finally i know about details :D

[@dera_ng]

Best video on this topic!!!!! (In plain English of course) ❤️❤️❤️❤️✊

[@keerthi4513]

Exceptional. Did really help clarify how OAuth/OpenID Connect "actually" works.

[@GamerMinecraftivity]

I've already watched this 3 times. It's really fantastic reference material, as are the slides that accompany it. Very well done!

[@pravinkalekar]

One of the best explanatory presentation I have seen on a topic which otherwise looks extremely complicated, especially for the beginners.

[@zakichoudhury]

Really good starting point for beginners who just trying to understand Authentication and Authorization and how OAuth works.

[@td9209]

Nate, the first 12 mins of your video made me pause it and type this down. As a security guy, I just want to say THANK U, I've been looking for this and you explain it pretty well. Reading this from books and internet was so overwhelming and you first pointed out: Jargon. You really rock bro

[@nbarbettini]

Thanks for the kind words! I'm glad it was helpful!

[@sushant0625]

25 mins into the video... and i already love the way you explained till now... hopefully it will be much clear once i finish it... no more banging on the wall to understand OAuth... :-D

[@manwithllama]

Only six minutes in, and it's obvious you're a great teacher! You're acknowledging the problem: the jargon and terminology. Explaining why it's a problem: how are you supposed to learn something new when someone uses language you don't understand? And giving examples of the frustration: newbies bounce from one stackoverflow post to the next, each saying the other person is wrong. (That's me, btw!) Looking forward to the whole talk! Thanks so much for posting!

[@clearlythuydoan]

YES! I found I understood parts of this topic in practice but then once someone started using technical lingo I was like, "What?"

[@prakhartripathi4708]

This is by far the best video that explains OAuth and OpenID Connect in the most simplest way possible

[@AbhayAR]

The person who works with Okta means a lot. Thanks Nate

[@arjitr]

This is the best video on OAuth2 and OpenId Connect. Thank you so much!

[@BorhanChowdhuryChittagong]

a little history and some practical use cases can make any learning absolutely easy and understandable! thanks Nate!

[@chrs-wltrs]

Very pleased that I used OAuth to authenticate with my bank for a finance app

[@nbarbettini]

That's great!

[@venkatsargoor819]

This video tells me that "I am not a fool", it was the ecosystem and the people who tried to teach me, that were not hitting the target exactly for various legitimite reasons. Nate is a great teacher and the person who asked some great pointed questions did a good job in letting the teacher get to the questions that cropped up in my head at the time and Nate had an hour to explain all this and this guy certainly knows the subject. On top of that having a good general idea upfront through hours of attempting to completely understand this subject all added up to make this a very very fruitful watch. Thanks Nate.

[@nbarbettini]

You're welcome. It's easy to feel frustrated with these concepts (and many others). Don't forget that everybody starts somewhere! 🙂

[@ujjwaldaga1440]

Exactly a developers perspective ! Just what an enterprise developer was looking for ! Very well done Nate !

[@camerontownshendsonatype6698]

Fantastic talk on OAuth. Probably one of the best tech talks I've heard period. Well done.

[@psylohzoff4073]

Try SOLID talks by UB ;-)

[@arpee1337]

It pisses my off how many of us developers don't strive for the simplicity used in this talk to explain things. This was awesome, thanks!

[@publicshared1780]

"OAuth 2.0 and OpenID Connect (in plain English)". It's actually IN PLAIN ENGLISH! PERFECT! The talk starts from the beginning without assuming too much knowledge. Thanks so much.

[@nbarbettini]

When learning this myself I was frustrated by finding so many explanations that assumed a huge amount of starting knowledge, and wanted to change that. Glad it was helpful!

[@kishormarathe7775]

I never had such a clear understanding for any youtube technical material in one go. Kudos @Nate... Your explanation is bang on, and what an insightful delivery. Keep it up man..!!!

[@nbarbettini]

Thanks for the kind words. I'm glad the presentation was helpful!

[@cyberworld13]

The most clear explaination of OAuth2.0 and OpenID out there! Thank you!

[@oah8465]

Hands down the best talk ever. Couldn't be simpler and more digestible. If you struggle to understand OAuth and OpenID connect after watching this talk, then you should change your major ASAP.

Well, it's the best explanation of the entire web. KZbin could have make my life easier presenting this stuff before. Thanks, Nate Barbettini!

[@nbarbettini]

You're welcome! Thanks for watching ♥

[@yohan_aka_spof]

Excellent talk! Finally found THE video that explains OAuth / OIDC well! Congrats Nate!

[@mehedees]

I've been stumbling around trying to understand this all day today! Thanks for this cool explanation! Kudos!

[@ujjwalghatak3787]

Finally OAuth/OpenIDConnect is demystified to me, thanks so much.

[@DjKatsouOfficial]

This is the man. Finally someone with the right skills to deliver knowledge! Really thank you! You save me from another 2 years of searching.

[@codeuniversityonline7510]

This is the best explanation in the internet for OAuth

[@jieouyang2856]

One of the best hour invested so far in the topic. Thank you

[@praveensb4880]

Was struggling with oauth and oidc for several days. 5 years old video, still there is no place where they have explained as in this video. Thank you so much.

[@nbarbettini]

You're welcome! ♥

[@arjunankathattichandrashek9763]

This is great!! after a week long online research and hair pulling, this video is a godsend to me! Thanks a ton for this valuable information!!!!

[@khpkd]

Finally got a better understanding about the relationship between OAuth and Open ID connect and about OAuth2.0 itself. Thank you very much.

[@airodonack]

This is amazing. Not only in what you’ve presented and what you’ve taught me but the way you’ve presented it is impressive!

[@punto-y-coma7890]

Really useful and precise way to explain such a difficult subject. Thank you very much for sharing our knowledge.

[@hanzheng173]

This is the most understandable video about OAuth on line.

[@meisterthea]

Hi Nate, I was struggling to understand this protocol and then came across your presentation. It's now very clear. Thanks so much.

[@Angel-mg2kp]

After watching multiple videos on OAuth I was about to give up learning this. Luckily I saw this video and it saved me. Thanks Nate

[@mayurdighe]

I love coming back to this video to get my understanding correct.

[@asishkumarsatapathy3466]

This is difference between someone who knows something and who understands something... Nice video

[@russtym]

Brilliant presentation. as always, when things are explained in plain English, it makes the topic understandable.

[@krishhhify]

Great presentation! you made me watch complete video without fast forwarding it. Good job

[@hkjpotato]

now not only it clarifies some of my confusion but also help me understand where those confusion came from

[@sanjaysuresh7894]

The best explanation for oauth2.0 and openID connect on youtube. Nate, you made it simple