Discuss SailPoint IdentityNow-Engineer Exam Topic 2 Question 18

Is this statement true about using the IdentityNow APIs?

Solution: The APIs are authenticated using a client-certificate.

AYes

BNo

Suggested Answer: B

SailPoint IdentityNow APIs are not authenticated using client certificates. Instead, they use OAuth 2.0 for secure authentication and authorization. API consumers are required to obtain an access token, which is used to authenticate requests made to the IdentityNow API. The token is typically obtained by sending client credentials (client ID and client secret) to the IdentityNow authorization server, which grants the token for API access.

Key Reference from SailPoint Documentation:

API Authentication: SailPoint IdentityNow uses OAuth 2.0 for API authentication rather than client certificates. Detailed steps on how to implement OAuth-based authentication are available in SailPoint's API documentation.

Get Premium IdentityNow-Engineer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

23 comments · newest first

Casie 10 months ago

No way, I've always used API keys for this.

Melodie 10 months ago

I thought they used OAuth tokens instead?

Onita 10 months ago

Yes, that's correct! Client certificates are used for authentication.

Juliann 10 months ago

Wait, really? I didn't know that was how it worked!

Lisbeth 10 months ago

Definitely true, I've implemented it before.

Laura 11 months ago

I’m leaning towards "No" because I remember discussing how most APIs use token-based authentication instead of client-certificates.

Lai 11 months ago

I feel like I saw something about client-certificates in the IdentityNow documentation, but I thought OAuth was more common.

Leeann 11 months ago

I remember a practice question about API authentication methods, and I think client-certificates were mentioned as an option, but I can't recall if they were the main method.

Eve 11 months ago

I think the APIs use OAuth for authentication, not client-certificates, but I'm not completely sure.

Anika 12 months ago

Ah, I remember learning about this in class. The APIs do use client-certificate authentication, so I'll go with option A.

Xuan 12 months ago

I'm a bit confused by this question. I'll need to review my notes on IdentityNow API authentication before answering.

Linette 12 months ago

This seems like a straightforward question. The statement says the APIs are authenticated using a client-certificate, so the answer must be yes.

Carlee 1 year ago

Hmm, I'm not too familiar with the IdentityNow APIs, so I'm not 100% sure about this. I'll have to think it through carefully.

Phung 1 year ago

I'm pretty sure the APIs are authenticated using a client-certificate, so I'll select option A.

Lashanda 1 year ago

A) Yes, I agree with Yolande. Client-certificate authentication provides an extra layer of security for APIs.

Malinda 1 year ago

Well, duh! Of course it's true. Who doesn't love a good client-cert these days? Keeps the hackers at bay.

Leeann 1 year ago

Hmm, I've seen this before. Client-certs are the way to go, no doubt about it.

Albert 1 year ago

Definitely true! Client-certs are the way to go for these kinds of APIs. Keeps things nice and secure.

Sharen 1 year ago

B) No, I disagree. APIs can be authenticated using other methods like OAuth tokens.

Yolande 1 year ago

A) Yes, I think the statement is true because client-certificate authentication is a common practice for APIs.

Edna 1 year ago

Yes, the statement is true. Using client-certificates for authentication is a common and secure approach for APIs.

Howard 1 year ago

↳ replying to Edna

That's correct

Reyes 1 year ago

↳ replying to Edna

Yes

SailPoint IdentityNow-Engineer Exam - Topic 2 Question 18 Discussion