Practice the pronunciation of security protocol terms including OAuth, SAML, OIDC, PKCE, and mTLS.
0 / 5 completed
1 / 5
How is 'OAuth' pronounced?
OAuth is pronounced /oʊˈɔːθ/ — 'oh-AUTH'. The name combines 'O' (open) + 'Auth' (authorisation). 'O' = /oʊ/ (the letter, diphthong). 'Auth' = /ɔːθ/ (the /ɔː/ vowel as in 'law', 'caught' + voiceless 'th' /θ/ as in 'think'). Two syllables: oh-AUTH, stress on the second. Non-native speakers sometimes say 'OH-ath' (short /æ/) or stress the first syllable. OAuth is an open standard for access delegation, allowing users to grant third-party apps limited access to their resources without sharing passwords — the mechanism behind 'Sign in with Google': 'The mobile app authenticates via oh-AUTH 2.0'.
2 / 5
How is 'SAML' pronounced?
SAML (Security Assertion Markup Language) is pronounced /ˈsæməl/ — 'SAM-ul'. The acronym is spoken as a word. 'SAM' = /sæm/ (short /æ/ as in 'Sam'). '-L' = /əl/ (schwa + /l/). Two syllables: SAM-ul, stress on the first. Non-native speakers may say 'SAY-mul' (diphthong) or spell it out. SAML is an XML-based open standard for authentication and authorisation between an identity provider (IdP) and a service provider (SP), commonly used for enterprise SSO: 'The corporate SSO integrates via SAM-ul 2.0 assertions'.
3 / 5
How is 'OIDC' pronounced?
OIDC (OpenID Connect) is pronounced /oʊ aɪ diː siː/ — 'OH EYE DEE SEE'. Each letter is spelled out: O = /oʊ/, I = /aɪ/, D = /diː/, C = /siː/. Four syllables. OIDC cannot be spoken as a word, so letter-by-letter pronunciation is always used. Non-native speakers may try to blend the letters. OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0 that adds authentication (who the user is) to OAuth's authorisation, returning an ID token as a JWT: 'The SSO provider supports OH EYE DEE SEE for authentication'.
4 / 5
How is 'PKCE' pronounced?
PKCE (Proof Key for Code Exchange) is pronounced /ˈpɪksi/ — 'PIK-see'. Despite being a four-letter acronym, it is spoken as the two-syllable word 'pixie' — a deliberate choice by the OAuth working group for memorability. 'PIK' = /pɪk/ (short /ɪ/ as in 'pick'). '-see' = /si/. Two syllables: PIK-see. Non-native speakers typically spell it out ('PEE KAY SEE EE') not knowing the established pronunciation. PKCE is an OAuth 2.0 extension that prevents authorisation code interception attacks by requiring a code verifier and challenge, essential for public clients (mobile apps, SPAs): 'Implement PIK-see in your mobile app to prevent auth code theft'.
5 / 5
How is 'mTLS' pronounced?
mTLS (mutual TLS) is pronounced /ɛm tiː ɛl ɛs/ — 'EM TEE EL ESS'. The 'm' (lowercase, for 'mutual') = /ɛm/ (the letter M). 'TLS' = T = /tiː/, L = /ɛl/, S = /ɛs/ — each spelled out. Four components: EM TEE EL ESS. In fast speech, developers often say 'em-TEE-EL-ess' with light stress on TEE. mTLS is never spoken as a word. Mutual TLS (mTLS) is an extension of TLS where both the client and server authenticate each other with X.509 certificates, providing two-way authentication — commonly used in service meshes like Istio: 'All internal service calls are secured with EM TEE EL ESS'.