Introduction

OAuth 2.0 supports different types of access token grants. OAuth2 Assertions draft "provides a framework for the use of assertions
with OAuth 2.0" and SAML2 Bearer Assertion Profiles for OAuth2 draft specifically provides for the use of SAML2 Bearer assertions.

These assertions can be used as token grants, but also, if needed, for getting 3rd party clients authenticated. Note the clients can use assertions as grants but use for example Basic authentication mechanism, or use say an authorization code grant and the assertion to authenticate, and finally, they can use assertions as a grant and as an authentication token.

Currently CXF supports SAML2 Bearer assertions as grants and authentication tokens.

See also the JAX-RS OAuth2 page for information about OAuth 2.0 support in CXF.

SAML2 Bearer

Access Token Grant

Authentication Token