A deployment professional has a requirement to configure an OpenID provider which does not expose tokens to the end user.
Which grant type should be enabled when creating the federation?
A . SAML
B . Explicit
C . Refresh Token
D . Authorization Code
Answer: D