Security Jeopardy

Old Habits Die Hard

100

If an Application CAN'T support OAuth, what ID must they use?

KSID / TSID 

200

If an Application is EXTERNAL and CAN'T support mTLS what must they get?

Operation Deviation

300

What team do you request an OAuth security policy from?

IAM

FHIR Sale

100

Are FHIR services REST or SOAP?

REST

200

What does FHIR stand for?

Fast Healthcare Interoperability Resources

300

What is needed for FHIR on Launch Apps to get routed to B2B FHIR instead of MU FHIR?

Bridges Override Configuration

OAuth Classics

100

What does OAuth stand for?

OAuth, or open authorization, is a widely adopted authorization framework that allows you to consent to an application interacting with another on your behalf without having to reveal your password. It does this by providing access tokens to third-party services without exposing user credentials.

200

If application doesn't require user to login, what the OAuth flow used?

Client Credentials

300

What is the word added in front of the token when adding the Authorization header to the API calls?

Bearer