diff --git a/sdk/oauth/claims.json b/sdk/auth/oauth/claims.json
similarity index 100%
rename from sdk/oauth/claims.json
rename to sdk/auth/oauth/claims.json
diff --git a/sdk/oauth/oauth.go b/sdk/auth/oauth/oauth.go
similarity index 100%
rename from sdk/oauth/oauth.go
rename to sdk/auth/oauth/oauth.go
diff --git a/sdk/oauth/oauth_test.go b/sdk/auth/oauth/oauth_test.go
similarity index 100%
rename from sdk/oauth/oauth_test.go
rename to sdk/auth/oauth/oauth_test.go
diff --git a/sdk/oauth/testdata/ca.jks b/sdk/auth/oauth/testdata/ca.jks
similarity index 100%
rename from sdk/oauth/testdata/ca.jks
rename to sdk/auth/oauth/testdata/ca.jks
diff --git a/sdk/oauth/testdata/keycloak-ca.pem b/sdk/auth/oauth/testdata/keycloak-ca.pem
similarity index 100%
rename from sdk/oauth/testdata/keycloak-ca.pem
rename to sdk/auth/oauth/testdata/keycloak-ca.pem
diff --git a/sdk/oauth/testdata/localhost.crt b/sdk/auth/oauth/testdata/localhost.crt
similarity index 100%
rename from sdk/oauth/testdata/localhost.crt
rename to sdk/auth/oauth/testdata/localhost.crt
diff --git a/sdk/oauth/testdata/localhost.key b/sdk/auth/oauth/testdata/localhost.key
similarity index 100%
rename from sdk/oauth/testdata/localhost.key
rename to sdk/auth/oauth/testdata/localhost.key
diff --git a/sdk/oauth/testdata/sampleuser.crt b/sdk/auth/oauth/testdata/sampleuser.crt
similarity index 100%
rename from sdk/oauth/testdata/sampleuser.crt
rename to sdk/auth/oauth/testdata/sampleuser.crt
diff --git a/sdk/oauth/testdata/sampleuser.key b/sdk/auth/oauth/testdata/sampleuser.key
similarity index 100%
rename from sdk/oauth/testdata/sampleuser.key
rename to sdk/auth/oauth/testdata/sampleuser.key
diff --git a/sdk/idp_access_token_source.go b/sdk/idp_access_token_source.go
index 39d1a875c..8c4a2583a 100644
--- a/sdk/idp_access_token_source.go
+++ b/sdk/idp_access_token_source.go
@@ -12,7 +12,7 @@ import (
 	"github.com/lestrrat-go/jwx/v2/jwk"
 	"github.com/opentdf/platform/lib/ocrypto"
 	"github.com/opentdf/platform/sdk/auth"
-	"github.com/opentdf/platform/sdk/oauth"
+	"github.com/opentdf/platform/sdk/auth/oauth"
 )
 
 const (
diff --git a/sdk/idp_cert_exchange.go b/sdk/idp_cert_exchange.go
index 70ef827e5..77de36245 100644
--- a/sdk/idp_cert_exchange.go
+++ b/sdk/idp_cert_exchange.go
@@ -8,7 +8,7 @@ import (
 	"github.com/lestrrat-go/jwx/v2/jwk"
 	"github.com/opentdf/platform/lib/ocrypto"
 	"github.com/opentdf/platform/sdk/auth"
-	"github.com/opentdf/platform/sdk/oauth"
+	"github.com/opentdf/platform/sdk/auth/oauth"
 )
 
 type CertExchangeTokenSource struct {
diff --git a/sdk/idp_token_exchange_token_source.go b/sdk/idp_token_exchange_token_source.go
index ef755a3f3..bdc789946 100644
--- a/sdk/idp_token_exchange_token_source.go
+++ b/sdk/idp_token_exchange_token_source.go
@@ -7,7 +7,7 @@ import (
 	"github.com/lestrrat-go/jwx/v2/jwk"
 	"github.com/opentdf/platform/lib/ocrypto"
 	"github.com/opentdf/platform/sdk/auth"
-	"github.com/opentdf/platform/sdk/oauth"
+	"github.com/opentdf/platform/sdk/auth/oauth"
 )
 
 type IDPTokenExchangeTokenSource struct {
diff --git a/sdk/options.go b/sdk/options.go
index b8fb489af..cef58880d 100644
--- a/sdk/options.go
+++ b/sdk/options.go
@@ -6,7 +6,7 @@ import (
 
 	"github.com/opentdf/platform/lib/ocrypto"
 	"github.com/opentdf/platform/sdk/auth"
-	"github.com/opentdf/platform/sdk/oauth"
+	"github.com/opentdf/platform/sdk/auth/oauth"
 	"golang.org/x/oauth2"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/credentials"