Which two grant types are supported for native and third-party OAuth providers?

Question breakdown

Tests

Configure native and third-party OAuth providers

Difficulty

Easy

Key idea: API Connect OAuth providers support the standard OAuth 2.0 grants: implicit, application (client credentials), password, and access code.

How to reach the answer

1. List the standard OAuth 2.0 grants that API Connect exposes: implicit, application, password, access code.
2. Match the options against that list.
3. 'Application (client-credentials)' and 'Implicit' match.
4. 'Explicit', 'Inhibit' and 'Exhibit' are not OAuth grant types, so B and E are the answer.

Each option

• AIncorrect. 'Explicit' is not a grant type; it is a distractor contrasting with implicit (the code flow is called access code).
• BCorrect. The application (client credentials) grant is supported for machine-to-machine access.
• CIncorrect. 'Inhibit' is not an OAuth grant type.
• DIncorrect. 'Exhibit' is not an OAuth grant type.
• ECorrect. The implicit grant is supported, returning the token directly to the client.

Common trap: 'Explicit' sounds like the natural counterpart to 'Implicit', but the redirect-based code flow is named access code (authorization code).

In practice: When creating a native OAuth provider in Cloud Manager, you tick which grants (implicit, application, password, access code) the provider will allow.

Remember: API Connect OAuth grants are implicit, application, password and access code.

Drafted with AI assistance and checked against the answer key.