This authorization grant is processed through the Authorization Server of the corresponding mail box (say G Suite for Gmail and Microsoft Azure for O365), which generates an access token with the Resource Owner's approval. In this case, ServiceDesk Plus MSP acts as the Client requesting access to the Mail Server ( R esource Owner ) and obtains the authorization grant. The authentication process with OAuth is explained in the flowchart below: The client can use this token to access the protec t ed resource hosted by the resource server. The authorization server validates the authorizati on grant and generates an access token with the approval of the resource owner. To access a protected resource, the client should obtain an authorization grant from the resource o wner and pass it on to the authorization server. Resource Server : The server that hosts the protected resource. Ĭlient : An end-user or application, requesting access to the resource.Īuthorization Server : The server that generates the access token for the client with the resource o wner's approval. Resource Owner : The user who owns the protected resource. OAuth authentication involves the following entities: With OAuth, resource owners can configure separate permissions for each client requesting access to the same resource and modify /revoke the access at any point of time. OA uth is a standard authorization protocol that provides delegated access to a protected resource using web tokens instead of passwords.

K9mail oauth2