What authorization model is utilized with IdNow's v3 REST APIs?

• A. OAuth 2
• B. SAML
• C. OpenID
• D. Kerberos

Answer: (A)

The authorization model utilized with IdNow's v3 REST APIs is OAuth 2. This model is widely adopted for securing APIs and allows applications to obtain limited access to user accounts without exposing user credentials. OAuth 2 operates through access tokens, which are issued to the client application after successful authentication of the user, enabling it to access certain resources on behalf of the user.

Using OAuth 2 provides flexibility in different types of authorization flows suitable for web applications, mobile apps, and server-to-server communications. This protocol enhances security by enabling users to grant applications specific permissions without sharing their passwords directly, thus minimizing security risks associated with credentials management.

In contrast, other models like SAML are primarily geared towards single sign-on and federating authentication across services, rather than direct API access control. OpenID, while also used for authentication, does not focus specifically on authorization, and Kerberos, which is a network authentication protocol, is not typically utilized for REST API authorization checks like OAuth. Therefore, OAuth 2 is the most appropriate and effective choice for securing API interactions within the context of IdNow's v3 REST APIs.