Which technology creates a security token that allows a user to log in to a desired web application using credentials from a social media website?

Which technology creates a security token that allows a user to log in to a desired web application using credentials from a social media website?

• A. Open Authentication
• B. OAuth
• C. SAML
• D. OpenID Connect

Answer: (A)

OpenID Connect is the identity layer built on top of OAuth 2.0. It creates an ID token that proves who the user is and is issued by the social provider (like Google or Facebook) when you choose to sign in with that provider. The web application relies on this token to log the user in, without the app ever needing the user’s social password. This is what enables social login: authentication via the provider and a trusted assertion about the user’s identity the relying party can trust. OAuth by itself handles permissions to access resources, not guaranteed user authentication, so it doesn’t inherently provide the identity assertion needed for login. SAML is another single sign-on protocol used mainly in enterprise settings and isn’t typically used for consumer social logins. “Open Authentication” isn’t a standard term for this workflow.

OpenID Connect is the identity layer built on top of OAuth 2.0. It creates an ID token that proves who the user is and is issued by the social provider (like Google or Facebook) when you choose to sign in with that provider. The web application relies on this token to log the user in, without the app ever needing the user’s social password. This is what enables social login: authentication via the provider and a trusted assertion about the user’s identity the relying party can trust.

OAuth by itself handles permissions to access resources, not guaranteed user authentication, so it doesn’t inherently provide the identity assertion needed for login. SAML is another single sign-on protocol used mainly in enterprise settings and isn’t typically used for consumer social logins. “Open Authentication” isn’t a standard term for this workflow.