SAML is a widely applicable authentication protocol whereas OAuth is an authorization standard designed for use with specific applications, devices, or APIs to provide secure delegated access. One is used to authenticate a user and the other is used to authorize specific access. OIDC is an authentication protocol built to specifically add a layer of security to OAuth 2.0. Using JSON web tokens (JWTs) to verify the identity of an end-user, it enables users to log in to multiple sites using one set of login credentials. Although SAML and OAuth are both interoperable standards, their purposes vary greatly. SAML handles the function of granting access, whereas OAuth handles the function of determining what can and cannot be accessed.