300-445 Question 167
Single answerAn organization is developing a web application that requires secure access to user data stored in third-party services. The application must allow users to log in without sharing their passwords directly with the application. Which authentication method should the organization implement to meet this requirement?
- A
Basic Authentication
- B
Digest Authentication
- C
OAuth
- D
Single Sign-On (SSO)
Show answer and explanation
Correct answer: C
Explanation
OAuth is specifically designed to enable secure delegated access to resources on third-party services. It allows users to grant an application limited access to their data without sharing their credentials, which aligns with the organization's requirements in this scenario.
- A. Incorrect.
Basic Authentication involves sending a username and password encoded in a Base64 format, which is less secure and not suitable for accessing third-party services without sharing credentials.
- B. Incorrect.
Digest Authentication uses a hashed version of the user's credentials for authentication but does not provide the ability to delegate access to third-party services securely.
- C. Correct.
OAuth allows users to authorize an application to access their data on third-party services without sharing their passwords, making it the most appropriate choice for this scenario.
- D. Incorrect.
Single Sign-On (SSO) enables users to authenticate once and access multiple systems, but it does not inherently provide the delegation capabilities required to securely access third-party services.