OneAPI authentication is based on modern token-based identity, aligned with OIDC/OAuth concepts through ZIdentity. OIDC is preferred for API authentication because it supports structured token validation and controlled access for automation clients. Option A (OpenID Connect (OIDC)) is correct because OIDC is the preferred authentication approach for OneAPI.
Why the other options are incorrect:
B. Transport Layer Security (TLS): TLS protects the transport channel. It does not identify the client or provide the OAuth/OIDC identity layer used for OneAPI authentication.
C. Security Assertion Markup Language (SAML): SAML is for browser SSO. OneAPI access tokens come from an OAuth/OIDC-style token endpoint flow, not from a SAML login assertion.
D. System for Cross-domain Identity Management (SCIM): SCIM keeps users, groups, and attributes synchronized. It does not authenticate an API client or issue OneAPI access tokens.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit