An organization is improving its web services to enable better customer engagement and self- service. The organization has a native mobile application and a rewards portal provided by a third party…

An organization is improving its web services to enable better customer engagement and self- service. The organization has a native mobile application and a rewards portal provided by a third party. The business wants to provide customers with the ability to log in once and have SSO between each of the applications. The integrity of the identity is important so it can be propagated through to back-end systems to maintain a consistent audit trail. Which of the following authentication and authorization types BEST meet the requirements? (Choose two.)