I read about Oauth2, mostly in the context of social media service providers like Google, Facebook, Twitter where they
- Try to allow access to user data without giving password to third party applications.
- Allow to use service without explicitly creating an account (StackExchange allows login through Google, Yahoo etc account)
Now, is Oauth2 relevant if I have the following use case.
I have an application, which is possibly deployed in cloud and provide a SAS model of business. I need user to create account (may be through an existing Oauth2 account), but also need to add other user to their account and manage access based on role. I read
scope can be used for specifying roles and fine grained access. But, I wonder whether Oauth2 is meant of enterprise use like these or almost exclusively for social media model of applications.
Thank you. bsr.