Discuss Ping Identity PAP-001 Exam Topic 2 Question 16

An administrator needs to configure a protected web application using the Authorization Code login flow. Which two configuration parameters must be set? (Choose 2 answers.)

AOAuth Token Introspection Endpoint

BOAuth Client ID

COpenID Connect Issuer

DVirtual Host

EOpenID Connect Login Type

Suggested Answer: B, E

When using the Authorization Code Flow for authentication, PingAccess must be configured with:

An OAuth Client ID that identifies the application to the IdP.

The OpenID Connect Login Type set to Authorization Code.

Exact Extract:

''When configuring an OIDC web session, specify the OAuth client ID and select the OpenID Connect login type (Authorization Code, Hybrid, or Implicit).''

Option A (OAuth Token Introspection Endpoint) is not required for Authorization Code flow --- token introspection is used in other cases.

Option B (OAuth Client ID) is correct --- required for OIDC authorization requests.

Option C (OpenID Connect Issuer) is discovered automatically via metadata when you configure the token provider.

Option D (Virtual Host) is required for application exposure but not specific to OIDC flow.

Option E (OpenID Connect Login Type) is correct --- must be set to ''Authorization Code.''

Get Premium PAP-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

18 comments · newest first

Nettie 17 days ago

I’ll remember B and C for sure.

Buffy 22 days ago

Definitely! Just focus on the flow specifics.

Eveline 28 days ago

Same here! It’s straightforward.

Nettie 1 month ago

I feel confident about this question.

Buffy 1 month ago

Right, it’s more for token validation.

Eveline 1 month ago

Not for the Authorization Code flow.

Nettie 2 months ago

What about A? Isn’t it important too?

Buffy 2 months ago

Agreed! Client ID and Issuer are key.

Eveline 2 months ago

I think B and C are essential.

Naomi 2 months ago

I disagree, I thought the Token Introspection Endpoint was needed too.

Lavonna 2 months ago

Yup, those two are essential for the flow.

Daisy 2 months ago

Wait, are you sure about that? I thought it was optional.

Margo 3 months ago

I think the OpenID Connect Issuer is also required.

Martina 3 months ago

Definitely need the OAuth Client ID!

Jeannetta 3 months ago

I feel like the OpenID Connect Login Type might be relevant, but I can't remember if it’s mandatory for the configuration.

Jeanice 3 months ago

I’m a bit confused; I thought the OAuth Token Introspection Endpoint was important, but I can't recall if it's necessary for this specific flow.

Denna 3 months ago

I remember practicing a similar question, and I believe the OpenID Connect Issuer is also required for the Authorization Code flow.

Shenika 4 months ago

I think the OAuth Client ID is definitely one of the parameters we need to set, but I'm not sure about the second one.

Ping Identity PAP-001 Exam - Topic 2 Question 16 Discussion