Which authentication mechanisms does SAP recommend for technical database users in SAP HANA Cloud? There are 3 correct answers to this question.

Question

Options

• AMulti-factor authentication
• BSAML
• CJWT
• DX.509
• EPassword-based

• A
  11% (2)
• B
  83% (15)
• E
  6% (1)

Explanation

SAP recommends SAML (B), JWT (C), and X.509 (D) for technical database users because these are token- or certificate-based mechanisms that allow automated, non-interactive authentication - critical for service accounts, background jobs, and integrations where a human isn't present to log in. SAML enables federated identity via an identity provider, JWT allows stateless token-based auth (commonly used in APIs and microservices), and X.509 uses client certificates for mutual TLS authentication, all of which are well-suited to machine-to-machine communication.

Multi-factor authentication (A) is incorrect because MFA requires human interaction (e.g., a one-time code), making it impractical for automated technical users. Password-based authentication (E) is incorrect because SAP explicitly discourages passwords for technical users in HANA Cloud - passwords can expire, be leaked, and don't scale well for service accounts.

Memory tip: Think "technical = non-human = no passwords, no MFA." The three correct answers (SAML, JWT, X.509) are all token or certificate based - no human needs to type anything. If it requires a person to interact, it's wrong for a technical user.

No community discussion yet for this question.