You are designing a software as a service (SaaS) application that will enable Microsoft Entra users to create and publish online surveys. The SaaS application will have a front-end web app and a back-end web API. The web app will rely on the web API to handle updates to customer surveys.

You need to design an authorization flow for the SaaS application. The solution must meet the following requirements:

• To access the back-end web API, the web app must authenticate by using OAuth 2 bearer tokens.

• The web app must authenticate by using the identities of individual users.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct collection is worth one point.