Short answer: a lot ๐ its an authentication protocol to have a single identity provider take care of all your users passwords, access rights etc., like those "login with Facebook" buttons.
It's a bit of advanced topic, but a solid way to minimise authentic based alley on username and password.
There is a GUI, ready to use apps exist for all the major OSes.