A company has a model-driven app that uses Microsoft Dataverse. The company requires a web application that retrieves information from the model-driven app. The requirements for the web application…

NTLM authentication is an older, proprietary protocol for Windows challenge/response authentication and is not suitable for modern web applications using OAuth with Azure AD.

Kerberos Authentication is a network authentication protocol primarily used in Active Directory environments for domain-joined machines, not for browser-based web applications connecting to Azure AD via OAuth.

Microsoft Azure Active Directory Authentication Libraries (ADAL) were the preceding generation of libraries for authenticating with Azure AD, supporting OAuth 2.0 flows, and are still used by existing applications for this purpose.

The Microsoft Authentication Library (MSAL) is the recommended, current generation of authentication libraries that enables developers to acquire tokens from the Microsoft identity platform to access protected web APIs, fully supporting modern OAuth 2.0 and OpenID Connect protocols.

Multifactor authentication (MFA) is a security *feature* that adds layers of verification, but it is not an authentication *method* itself and the requirement specifically states 'without additional verification' from the app's perspective.