Resource Owner: The user who owns the data. Client: The application requesting access to the resource owner's data. Authorization Server: The server that authenticates the resource owner and issues access tokens. Resource Server: The server hosting the protected data, which accepts access tokens issued by the authorization server.