Short answer: a lot 😉 its an authentication protocol to have a single identity provider take care of all your users passwords, access rights etc., like those “login with Facebook” buttons.

It’s a bit of advanced topic, but a solid way to minimise authentic based alley on username and password.