provides a method for users to determine what information to provide to third-party applciations, does not provide authentication, only authorization