OAuth 2.0 and OpenID Connect (in plain English)

Developer Advocate Nate Barbettini breaks down OpenID and OAuth 2.0 in Plain English. NOTE: This video is from 2018 and contains some information that is now out of date, mainly the content around the OAuth Implicit Flow.
Check out our video course! The Nuts and Bolts of OAuth 2.0 oauth2simplifi...
Learn more about OAuth at oauth.net
Get the book: OAuth 2.0 Simplified amzn.to/36HAGoS
Find Nate's slides here: speakerdeck.co...
Sign up for our newsletter! a0.to/zeroindex

[@GaneshNarasimhadevara]

5 Years old video and still so relevant and precise to date! Nothing beats this video in explaining OAuth and OIDC

[@ciroformenton]

You stole my words...

[@watherby29]

​@@ciroformentonyou too

[@Nab_001]

you too (1)@@watherby29

[@ABHISHEK0058]

@@watherby29 you too

[@osinorsis]

@@ABHISHEK0058you too

[@AasmundNrsett]

This lecture summarised everything I have spent 20 hours googling in one hour. Fantastc!

[@OktaDev]

This comment means a lot as that is exactly the goal of this video. Thank you for your feedback.

[@somnathroy102]

Now seeing a 2 month of comment i can feel safe following this video as it seems to be still relevant.

[@eduardgorte8241]

Same

[@AshokaChozhn]

Wow!! You were able to understand everything in 20 hours of Googling? That's lightening speed for this topic IMO

[@radioactive5271]

RIP to those who missed this video thinking that its an hour video & went for 10 min videos.

[@szilardfineascovasa6144]

Now I get it.

[@mj2068]

true dat. really really good video

[@gavintryzbiak-careai]

Spent the last week trying to make sense of OAuth using 10 min videos... I wish I hunkered down and just watched this sooner.

[@legozd2761]

I skipped this video before cause it long, came back through a reddit post and 18 mins into it. I understood the fundamentals

[@atzz_sec]

Really good video

[@adebiyial]

He not only knows his stuff, but he also knows how to teach it. That's a rare and high-profile combination.

[@hsharma3933]

It’s a hallmark of subject matter mastery. I believe it was Einstein that said, “…(paraphrased) if you can’t explain rocket science to a child, you don’t understand it well enough.”

[@terrencemasuku8909]

This guy is an excellent teacher. Wow! I am very honored and grateful

[@swagatopablo]

@H Sharma well, he explained it to a room full of software developers, who, I assume, already have some experience in Web development, not to a room full of nursery kids.

[@hsharma3933]

@@swagatopablo that’s not really the audience. KZbin viewers are the audience. And he took that into account when he was delivering his lecture.

[@sifr-in]

@@hsharma3933 very well quoted (eyenstine 🙂 my spelling)

[@brittlindgren1443]

Things that I really appreciated about this video 1. Introduced workflow without any or with minimal technical terms 2. Introduced the terminology and explained in simple terms 3. Went back to the workflow and incorporated the terminology with the workflow 4. Repeated questions from the audience so that those of us watching the video knew what the question was What a great video!!! Nate did a great job of teaching this material!

[@nbarbettini]

I appreciate the kind words. Thanks for watching! I'm glad it was helpful!

[@Kingside88]

May I add 5. not beeing stupid funny and translate the terminilogy in stupid analogy

[@alexanderwitte9919]

I just explicitly logged into youtube to like this video. Thanks so much for putting this talk together and demystifying this stuff.

[@amdel2020]

More than justifies it's title of "in plain English". Brilliant explanation. Sets the benchmark for how to explain things.

[@nbarbettini]

Thanks for your kind words!

[@SendhilKumarRamalingam]

I couldn't agree more, Thanks Nate

[@sifr-in]

this is also important or else many of times don't feel like watching because of english accent (take positively)

[@2510viv]

This is by far the best video to understand OAuth and OpenIDConnect.. Nate is an outstanding teacher!

[@CraftyFella]

Finally.. someone has explained this in a way I can understand.. Thanks Nate for this presentation.

[@ujjwaljain144]

true that

[@MegaBig60]

Totally agree on that. I had been scratching my head over this OAuth and OpenID stuff.

[@mukhtharak2043]

Where can I find this presentation slides?

[@manmohitsingh9813]

@@mukhtharak2043 Check description of the video

[@pratikkamat8148]

totally agreed!!

[@xerxius5446]

You know what they say, If you can't explain it simply, you don't know it. This guys knows his stuff. bravo!

[@debanjanbarman7212]

not true for everyone.

[@sifr-in]

@@debanjanbarman7212 u r also right

[@noble9944]

Why can't university lectures be as interesting as talks like these. This is great, thank you.

[@jerrybracke597]

Imagine this bright guy explaining this stuff to a room of immature 19 year olds. Not just once, but year, after year, after year. Its like keeping a killer whale in a basin, he ll die from boredom. Theres an old saying that goes; those who can, do, those who cant, teach. he can.

[@davidpigman7382]

I'm a principal architect on a fortune 500 SaaS ERP implementation. My challenge is not only for myself to understand OAUTH 2.0, but also be able to explain this to stakeholders. This video does precisely this, incredible presentation. Thank you.

[@sifr-in]

after ur comment a year ago. i am in that spot of explaining to stakeholders. 🙂

[@RamGorre]

There is no better video than this one to understand OAuth and OpenID Connect. You can bet on it.

[@alekhsharma3590]

One of the best 1 hour i have ever spent on this app. Extremely useful, easy to understand.

[@djzenma]

I usually never comment, but this was an amazing talk. He not only explained how the protocols work, but also their history, the bad solutions that the companies tried before these protocols were created, and how OAuth and OIDC solved these problems and standardized authentication and authorization in the web. Love it!

[@OktaDev]

Thanks for leaving this comment. It means a lot. We hope to see you around in our other content :)

[@iphone2web]

6 years on and Im just getting into this. This has been the clearest explanation by far. Thank you.

[@ivangutowski-smith5590]

now THIS: is how you do a presentation, clear, and build up the presented information as you teach it. The one thing that is so small, but a sign of a fantastic presenter: 26:30 a guy asked a question, Nate repeated it back to summaries he understood it welll - and for us watching a recording - we could hear the question... So professional, impeccable presentation and clear content.

[@nbarbettini]

Thanks for the kind words. I'm glad the presentation has been useful for lots of folks!

[@lipikamajumdar9219]

This is one of the best content to understand OAuth 2.0 & OpenID Connect. Thanks for sharing it.

[@vivekmit]

One of the best session on youtube of oauth + openId.

[@AliHussein-go9qx]

This is definitely the best explanation anyone can get about how OAuth2.0 and OpenID Connect work under the hood.

[@jasonscheiwiller860]

I've lost count of how many confusing articles I've read online about this. Thanks for making it much easier

[@jankowalski2652]

The best explanation of OAuth and OpenID connect I saw on the internet (including paid ones). Respect!

[@shwethab7950]

I was scratching my head when I used to hear the word OAuth. Now I clearly understood the OAuth basics. Thanks for explaining with this much of clarity.

[@berrec2650]

OMG finally, after reading all the Google stuff and reading other documentation and watching videos for months on and off, I finally got it. It might be 4 years old, but thanks so much for putting OAuth V 2 so simple and easy to understand, also thanks for the great tools, just amazing..........

[@zax71]

This is the best video on Oauth 2 and OpenID Connect that I have found so far. Really helps get the concepts you need for search terms

[@mikopanjean8756]

I've seen a lot of explanations and didn't understand the concept. FINALLY a very good expansion made me understand the concept . thank you!!

[@amoghskulkarni]

Nate, you have transformed my understanding of Oauth 2.0 and OIDC for good. I cannot thank you enough. Keep doing the good work! :)

[@nbarbettini]

Thanks for the kind words! I'm glad the talk helped!

[@cpgupta123]

I came across this video as I wanted to learn OAuth and OpenID to answer 10 questions in a quiz. Trust me that after watching this video, I answered all of them correct. I had no clues how t even answer 1 singe question before watching this video. MAN..you are just awesome. Thanks a ton !

[@shobhitmittal77]

The title should be "Everything you ever wanted to know about OAuth". Thanks much Nate... superbly explained.

[@afrarjahin2898]

This is the best explanation i've found on youtube.Thanks a lot

[@pegahut]

I just watched half of it and can't stop myself commenting. I knew Oauth before but I always have a missing piece in the puzzle. I had to unlearn to relearn in the perfect way. Awesome presentation and explanation. you got a skill !! Glad I found this video

[@chrs-wltrs]

Very pleased that I used OAuth to authenticate with my bank for a finance app

[@nbarbettini]

That's great!

[@EhsanAmini]

You've only got to watch the tons of other tutorials out there and wade through the reams of obscure and perplexing documentation to really appreciate what a brilliant job this presentation does of explaining this cryptic jargon. Thanks a zillion! Oh if you only did another such presentation on general relativity and one on quantum mechanics.

[@pubudu313]

"This is the clearest explanation for ever you’ll find on the internet till OAuth X. Thanks!"

[@Oduig]

Best explanation of OAuth2 and OpenID Connect on the internet. Thank you.

[@ujjwalghatak3787]

Finally OAuth/OpenIDConnect is demystified to me, thanks so much.

[@mortgaughaleb]

Honestly I implemented the both protocols before attending this video but really, such explanation should be included as a video in the protocols tutorials, nobody could eliminate the confusion in this way. Nate you're very amazing instructor.

[@ChetanAccount]

I have seen/red multiple tutorials was never understood open id connect so well . Everybody explains oauth correctly but no one i came across has explained open id connect so well. Awesome job . Thank you !

[@akillercaterpiller]

Very few people have the ability to deliver complex information in an understandable and concise way. You have this ability, Nate. Thank you.

[@pierryangelo]

Well, it's the best explanation of the entire web. KZbin could have make my life easier presenting this stuff before. Thanks, Nate Barbettini!

[@nbarbettini]

You're welcome! Thanks for watching ♥

[@sreekantn9830]

Absolutely brilliant - Watching it nearly after 2-years you presented, but nothing comes close to presenting it this well. It is not easy to explain complex concepts in simple terms, but you managed it pretty well Nate. Thank you for the session and sharing the content.

[@nbarbettini]

Thanks for watching! And thanks for the kind words. :)

[@td9209]

Nate, the first 12 mins of your video made me pause it and type this down. As a security guy, I just want to say THANK U, I've been looking for this and you explain it pretty well. Reading this from books and internet was so overwhelming and you first pointed out: Jargon. You really rock bro

[@nbarbettini]

Thanks for the kind words! I'm glad it was helpful!

[@manwithllama]

Only six minutes in, and it's obvious you're a great teacher! You're acknowledging the problem: the jargon and terminology. Explaining why it's a problem: how are you supposed to learn something new when someone uses language you don't understand? And giving examples of the frustration: newbies bounce from one stackoverflow post to the next, each saying the other person is wrong. (That's me, btw!) Looking forward to the whole talk! Thanks so much for posting!

[@clearlythuydoan]

YES! I found I understood parts of this topic in practice but then once someone started using technical lingo I was like, "What?"

[@prakhartripathi4708]

This is by far the best video that explains OAuth and OpenID Connect in the most simplest way possible

[@kishorsmarathe]

I never had such a clear understanding for any youtube technical material in one go. Kudos @Nate... Your explanation is bang on, and what an insightful delivery. Keep it up man..!!!

[@nbarbettini]

Thanks for the kind words. I'm glad the presentation was helpful!

[@TonyTigerTonyTiger]

This was much longer than the other videos I've watched on OAuth 2.0, but this one was a much better explanation. Worth the extra time.

[@VishnuDixit]

Just outstanding! The world owes you one

[@OktaDev]

Thanks for watching!

[@ChaitanyaDevavarapu]

Excellent presentation. So simple, crisp and clear. For anyone who want to understand what the heck is OAuth2 and OpenID Connect, this is the best presentation to go.

[@ujjwaljain144]

Exactly a developers perspective ! Just what an enterprise developer was looking for ! Very well done Nate !

[@officialdanieldsouza]

I am so thankful I stumbled on this video. I felt horrible for not being able to wrap my head around this stuff easily. Thank you for this video! It was super helpful.

[@nbarbettini]

Don't feel bad, everyone finds this stuff complex! The reason I wrote this talk initially was because I was confused myself.

[@officialdanieldsouza]

Thanks again! The way you explained this stuff was really easy to grasp. Would you be able to do one on JWT?

[@gligom]

Wow! I just have an “Ahaaaa!” moment. What a good presentation, with so clear explanations about oauth and open connect id. Thank you very much!

[@nbarbettini]

I'm glad I could share the "aha!" moment with you! Thanks for watching.

[@gorancogic5385]

I watched this video like 4-5 months ago and all the knowledge went by me. Got a job and there we so many problems regarding authentication/authorization and understanding how it works. I decided to watch this clip again and it all suddenly clicked. Incredible video. Thanks a lot.

[@pravinkalekar]

One of the best explanatory presentation I have seen on a topic which otherwise looks extremely complicated, especially for the beginners.

[@amizan8653]

Good god, thank you SO much for this presentation. None of the documentation I read online made sense to me. This made perfect sense to me.

[@nbarbettini]

I'm glad it was helpful!

[@Angel-mg2kp]

After watching multiple videos on OAuth I was about to give up learning this. Luckily I saw this video and it saved me. Thanks Nate

[@sidpradhan7618]

wow this is one of the best vidoes on Auth 2.0 and Open ID Connect. I had watching many other vidoes and still did not understand Auth but this video has enlighted me. Thank OktaDev

[@lahvoopatel2661]

Still the best lecture on oauth and oidc after 4 years

[@annoyingorange90]

one of the best videos i’ve ever watched! god bless you man

[@GamerMinecraftivity]

I've already watched this 3 times. It's really fantastic reference material, as are the slides that accompany it. Very well done!

[@praveensb4880]

Was struggling with oauth and oidc for several days. 5 years old video, still there is no place where they have explained as in this video. Thank you so much.

[@nbarbettini]

You're welcome! ♥

[@ShirazHazrat]

This man deserves an award. Great presentation!

[@ramyfarid2296]

Thank you! This is the cleanest and most t0-the-point explanation I have seen on OAuth and OpenID Connect

[@kamalbahadur007]

I have probably gone through tons of videos on OpenID Connect and OAuth 2.0 and no doubt this one is best.

[@DevMS007]

watched complete video..totally worth spending 1 hour..easy explanation and covered concept in details.

[@nbarbettini]

Thanks for watching!

[@ezy7716]

i was feeling so bad to not understand identity protocols. thank you so much Nate! you made my day with your awesome pure explanation.

[@pratiks3]

Wicked! Even if you know Oauth 2.0, it's worth watching the entire presentation to get a deeper understanding of why it's so prevalent!

[@camerontownshendsonatype6698]

Fantastic talk on OAuth. Probably one of the best tech talks I've heard period. Well done.

[@psylozoff]

Try SOLID talks by UB ;-)

[@DjKatsouOfficial]

This is the man. Finally someone with the right skills to deliver knowledge! Really thank you! You save me from another 2 years of searching.

[@IsakSavo]

Absolutely great presentation. Been playing around with oauth and openid connect for one of our products but not really understanding what all the pieces meant. Now I do. Thanks!

[@bmiguelmf]

Simplicity is the ultimate sophistication. You just made my day. Cheers mate, all the best!

[@nbarbettini]

I am happy to hear that! Cheers!

[@codeuniversityonline7510]

This is the best explanation in the internet for OAuth

[@emersontavera9362]

Thank you so much, I'm learning spring security right now and it's always better to go to the fundamentals and then go ahead and write some code, everything is clear now, so it's time to write some code, thanks again

[@responsive_random]

The topics of AuthN and AuthZ were always scary to me and like Nate said in the video mostly it’s because the confusing content on the web. But this talk is so crystal clear and brings so much clarification into my efforts in understanding OAuth, as well as authentication/authorization concepts. Kudos! Hats off!

[@publicshared1780]

"OAuth 2.0 and OpenID Connect (in plain English)". It's actually IN PLAIN ENGLISH! PERFECT! The talk starts from the beginning without assuming too much knowledge. Thanks so much.

[@nbarbettini]

When learning this myself I was frustrated by finding so many explanations that assumed a huge amount of starting knowledge, and wanted to change that. Glad it was helpful!

[@sushant0625]

25 mins into the video... and i already love the way you explained till now... hopefully it will be much clear once i finish it... no more banging on the wall to understand OAuth... :-D

[@sanjaysuresh7894]

The best explanation for oauth2.0 and openID connect on youtube. Nate, you made it simple

[@airodonack]

This is amazing. Not only in what you’ve presented and what you’ve taught me but the way you’ve presented it is impressive!

[@snittolo]

This finally worked to explain the difference, Thank You so much!

[@jieouyang2856]

One of the best hour invested so far in the topic. Thank you

[@colza1025]

Brilliant explanation. To anyone who is wondering why this video is so long, this video not only explains OpenID, but also the login flow, OAuth, and all the granularity while executing in code. After watching this, you will get a very solid understanding of how to implement login flow.

[@run-forrest-run]

I watch this video every 1.5 years to refresh. Remember guys. ID token is always a JWT token and is a result of authentication. Access Token is a result of authorization and can be a JWT token but doesn’t necessarily have to be.

[@OktaDev]

Many of us also watch this video periodically. Nate did an amazing job! 🤩

[@arjunankathattichandrashek9763]

This is great!! after a week long online research and hair pulling, this video is a godsend to me! Thanks a ton for this valuable information!!!!

[@StephenBeale]

16:15 terminology section - very helpful 21:00 key part of process

[@arpee1337]

It pisses my off how many of us developers don't strive for the simplicity used in this talk to explain things. This was awesome, thanks!

[@rajbiswas776]

Had so many gaps in my knowledge, had to make notes to make sure I can go back to those, good job Nate.

[@dera_ng]

Best video on this topic!!!!! (In plain English of course) ❤️❤️❤️❤️✊

[@cyberworld13]

The most clear explaination of OAuth2.0 and OpenID out there! Thank you!

[@BlackMamba1969]

I've just used Oauth 2.0 and OpenIdConnect to connect on youtube thru my Google acount to click "I like it" to this video. Really great presentation. Thanks.

[@nbarbettini]

Nice real world example!

[@BorhanChowdhuryChittagong]

a little history and some practical use cases can make any learning absolutely easy and understandable! thanks Nate!

[@needleinhaystack]

I was thinking of coming up with a simple explanation to explain the concepts to my team. Now, I can just forward this video. Thanks Nate Barbettini for creating content of such high quality.

[@nbarbettini]

Glad it was useful!

[@meisterthea]

Hi Nate, I was struggling to understand this protocol and then came across your presentation. It's now very clear. Thanks so much.

[@Kc-nn8mn]

I can't believe i didn't get lost after watching this awesome vidoe for more than 1 hour. Finally, i know what Oauth2 and OpenID are. Thanks!

[@mehedees]

I've been stumbling around trying to understand this all day today! Thanks for this cool explanation! Kudos!

[@roman_mf]

Wow, that hour has passed really fast. Superb presentation. Nate really knows his stuff. Thank you!

[@nbarbettini]

Thanks for watching!

[@miguelakira]

Excellent video! I've been banging my head to the wall for the last couple days, until i saw your presentation. Can't praise you guys enough! Thanks!

[@anands2257]

Fantastic video....one of the very best I have seen on this topic!

[@mavinkaljayaram1269]

Thank you so much for this presentation. Absolutely love, how you systematically introduced the concepts. Especially about how OpenID fits in with the whole Oauth flow. That was the part that always confused me. You explained the evolution of these technologies, and that timeline is important in understanding why they were created, and what problem it is trying to solve. Keep up the good work.

[@venkatsargoor819]

This video tells me that "I am not a fool", it was the ecosystem and the people who tried to teach me, that were not hitting the target exactly for various legitimite reasons. Nate is a great teacher and the person who asked some great pointed questions did a good job in letting the teacher get to the questions that cropped up in my head at the time and Nate had an hour to explain all this and this guy certainly knows the subject. On top of that having a good general idea upfront through hours of attempting to completely understand this subject all added up to make this a very very fruitful watch. Thanks Nate.

[@nbarbettini]

You're welcome. It's easy to feel frustrated with these concepts (and many others). Don't forget that everybody starts somewhere! 🙂

[@devlondres]

Excellent content. In simple and clear terms. Thank you so much Nate and Okta.

[@OktaDev]

Thanks for watching! Glad to hear you found this content helpful.

[@VishalDeshpandedotnet]

I haven't seen best explanation than this on OAuth and OPenID Connect. It clears lots of doubts from my side about using this. Thank you very much @Nate Barbettini for this video