ForgeRock AIC Practice Exam

Which protocol is primarily used for user authentication and authorization in OAuth2?

1. LDAP

2. SAML

3. OpenID Connect

4. HTTP

The correct answer is: OpenID Connect

In the context of OAuth2, OpenID Connect is the correct choice as it builds upon the OAuth2 protocol specifically to address user authentication and authorization. While OAuth2 itself is a delegation framework that mainly focuses on authorization, OpenID Connect adds an identity layer that allows applications to verify the identity of users based on the authentication performed by an authorization server. OpenID Connect accomplishes this through the use of ID tokens, which provide essential user information and establish user authenticity. This integration enables developers to utilize OAuth2 for granting access permissions while simultaneously utilizing OpenID Connect for user authentication, creating a cohesive user experience. The other options are not primarily focused on the OAuth2 framework for user authentication. LDAP is a protocol typically used for directory services and accessing information in directories, SAML (Security Assertion Markup Language) applies more to cross-domain single sign-on scenarios rather than OAuth2 authorization flows, and HTTP (Hypertext Transfer Protocol) serves as the foundational protocol for the web, not specifically tailored for authentication or authorization in the context of OAuth2.