What should you do?

DRAG DROP
You are converting an existing ASP.NET web application to use the Azure Active Directory (AD) Access Control service for authentication. The application will authenticate users by using their Yahoo account credentials. You need to determine the correct payload for each stage of the authentication process. What should you do? To answer, drag the appropriate payload format to the correct location on the dialog box. Eacl payload format may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Select and Place:

Correct Answer:

Explanation/Reference:
Explanation:
Azure AD can support password-basea single sign on for any cloud-based app that has an HTML-based sign-in page. By using a custom browser plugin, AAD automates the user’s sign in process via securely retrieving application credentials such as the username and the password from the directory, and enters these credentials into the application’s sign in page on behalf of the user.
Microsoft Azure Active Directory Access Control (also known as Access Control Service or ACS) supports federation with Yahoo! as an identity provider using the OpenID 2.0 authentication protocol.
References:
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-appssoaccess-whatis
https://msdn.microsoft.com/en-us/library/azure/gg185921.aspx