The canonical OAuth 2.0 authorization code flow — user, client, auth server, resource server. Reference diagram for any team implementing or documenting SSO.