Which authentication mechanism should you use?

Your company is developing an Azure API.

You need to implement authentication for the Azure API.

You have the following requirements:

✑ All API calls must be secure.

✑ Callers to the API must not send credentials to the API.

Which authentication mechanism should you use?
A . Basic
B . Anonymous
C . Managed identity
D . Client certificate

View Answer

Answer: C

Explanation:

Use the authentication-managed-identity policy to authenticate with a backend service using the managed identity of the API Management service. This policy essentially uses the managed identity to obtain an access token from Azure Active Directory for accessing the specified resource. After successfully obtaining the token, the policy will set the value of the token in the Authorization header using the Bearer scheme.

Reference: https://docs.microsoft.com/bs-cyrl-ba/azure/api-management/api-management-authentication-policies