---
title: Authorization Server (AS)
sidebar_custom_props:
    termName: Authorization Server (AS)
    tags:
        - OAuth2/OIDC
    shortDescription: OAuth2 role that issues tokens and hosts authorization endpoints.
    longDescription: Server that authenticates resource owners, obtains consent, and issues access/refresh (and in OIDC, ID) tokens to clients. Provides authorization, token, introspection, revocation, and metadata (discovery) endpoints. In OIDC, the Authorization Server is called the OpenID Provider (OP).
---
