A new type of authentication service, token credentials, is useful for offline mobile applications. This service supports authentication that is based on secure tokens that are generated by the Pega Platform™ authorization layer (OAuth 2.0) or issued by an external identity provider. With a token credentials authentication service, Pega Platform clients can securely extend the trust obtained from the identity provider without having to reenter their credentials to access Pega applications.

The following figure shows an example of a token credentials authentication service.

For more information, see Configuring a token credentials authentication service.