When creating a Web API, which two items are configured in the Administration Console? (Choose two.)

When securing a Web API, two key components are managed within the Appian Administration Console. First, API Keys are generated and managed in the Admin Console to provide a credential for external systems to authenticate their requests. Second, Service Accounts, which are a special type of user account, are also created and managed in the Admin Console. These accounts are typically used in the "Run As" field of the Web API object to define the security context and permissions the API will have when executing its logic within the Appian environment.

A. LDAP Authentication: This is configured in the Admin Console for user sign-in to the Appian platform, not for authenticating calls to a specific Web API from an external system.

C. Connected System: This is an Appian design object used for outbound integrations (calling external systems from Appian) and is configured within the Appian Designer, not the Administration Console.

1. API Key: Appian Documentation

API Keys

"API keys are managed in the Administration Console on the API Keys page. An API key is required to use an Appian Web API..."

2. Service Account: Appian Documentation

Service Accounts

"Service accounts are created and managed in the Administration Console... They are commonly used for authenticating with Web APIs and for running processes that are not initiated by a human user."

3. Web API Security Context: Appian Documentation

Web API Object

"The Web API runs as the user specified in the Run as field... For a higher level of security

we recommend using a service account." This confirms the role of a service account

which is managed in the Admin Console.