What role does your Salesforce org play in providing authorization for external

Salesforce can act as an independent OAuth authorization server to protect resources hosted on an external API gateway. The authorization server verifies the resource server’s request and creates the connected app, giving it a unique client ID and client secret.