Which external identity management protocols are supported by Anypoint?

• A. OAuth 2.0 only
• B. Kerberos
• C. LDAP
• D. OpenID and SAML 2.0

Answer: (D)

External identity management protocols let Anypoint delegate user authentication to a trusted identity provider, enabling single sign-on and federated access across apps and APIs. In this context, Anypoint supports OpenID Connect (OpenID) and SAML 2.0. OpenID Connect builds on OAuth 2.0 to provide standardized user authentication and ID tokens from the identity provider, while SAML 2.0 exchanges authentication assertions between the identity provider and the service, enabling SSO for web applications and services. Together, these two protocols cover the common ways Anypoint integrates with external IdPs for authentication.

The other options don’t fit as well. Kerberos is a network authentication protocol more typical of on-premises, domain-based environments, not the standard external IdP protocols used for web SSO in Anypoint. LDAP is a directory access protocol used to query user information, not an authentication federation protocol for SSO. OAuth 2.0 by itself is an authorization framework, not the identity federation mechanism that OpenID Connect provides, so it wouldn’t describe the complete external identity management support in Anypoint.