User-Managed Access

Abstract

OAuth 2.0 introduced an authorization framework for access delegation. It lets Bob delegate read access to his Facebook wall to a third-party application, without sharing Facebook credentials. User-Managed Access (UMA, pronounced "OOH-mah") extends this model to another level, where Bob can not only delegate access to a third-party application but also to Peter who uses the same third-party application.