An open standard for access delegation, often used for token-based authentication.