Which protocol caches a token after it has been acquired?

Which protocol caches a token after it has been acquired?

• A. MSAL
• B. OAuth2
• C. SAML
• D. JWT

Answer: (A)

Caching a token after it’s acquired is about how a client stores credentials so it can reuse them without re-authenticating. MSAL is the library designed to manage that process for you. When you obtain an access token (and possibly a refresh token), MSAL stores them in a secure token cache on the client. That allows subsequent API requests to reuse the existing access token until it expires, and, if needed, use the refresh token to obtain a new access token without prompting the user again. This token cache behavior is a built-in feature of MSAL’s authentication flow. OAuth2 defines how tokens are issued and exchanged but doesn’t mandate how clients should cache tokens, so caching isn’t guaranteed by the protocol itself. SAML is a protocol that uses security assertions for SSO and isn’t about client-side token caching in the same sense. JWT is a token format, not a protocol or a caching mechanism, so it doesn’t specify or ensure caching by itself.

Caching a token after it’s acquired is about how a client stores credentials so it can reuse them without re-authenticating. MSAL is the library designed to manage that process for you. When you obtain an access token (and possibly a refresh token), MSAL stores them in a secure token cache on the client. That allows subsequent API requests to reuse the existing access token until it expires, and, if needed, use the refresh token to obtain a new access token without prompting the user again. This token cache behavior is a built-in feature of MSAL’s authentication flow.

OAuth2 defines how tokens are issued and exchanged but doesn’t mandate how clients should cache tokens, so caching isn’t guaranteed by the protocol itself. SAML is a protocol that uses security assertions for SSO and isn’t about client-side token caching in the same sense. JWT is a token format, not a protocol or a caching mechanism, so it doesn’t specify or ensure caching by itself.