OAuth and token-based authentication are a common point of confusion and frustration for .NET developers. OAuth is not single sign-on, but it’s often confused with SSO because many login providers (such as Google and Facebook) use a flavor of OAuth to handle external login. At the most basic level, OAuth means generating access and refresh tokens when users log into your application. And tokens are awesome!