Management API call- SSO and MFA supported ?

[aramkrishna6]

based on listed docs link

https://docs-edgeapis.apigee.io/docs/api-products/1/routes/organizations/%7Borg_name%7D/apiproducts/...

Lists that Management API call supports Basic Auth or OAUTH 

1. Apigee uses SSO (Single Sign on) if that the case then will that be still supported ? 

2. Lists that MFA is not supported for all the Management API call (What will be alternative) if using MFA ? does Management API  cannot be even used ? any options ?

3. OAUTH option:  which lists the calling using OAUTH token is supported,

Not sure if Apigee with SSO is supported with Managment API call ?  because "Basic" is supported for Management API calls , hence SSO should also work ?   for MFA what would be option

[cjking]

> 1. Apigee uses SSO (Single Sign on) if that the case then will that be still supported ? 

This can work if you use machine users or passcodes to generate your OAuth tokens, yes.

> 2. Lists that MFA is not supported for all the Management API call (What will be alternative) if using MFA ? does Management API  cannot be even used ? any options ?

You need to use OAuth for this (or a client wrapper for the same), the OAuth endpoint supports MFA Auth.

> 3. OAUTH option:  which lists the calling using OAUTH token is supported,

I'm not sure I understand the question.

OAuth tokens are generated from the OAuth API, described here: https://docs.apigee.com/api-platform/system-administration/management-api-tokens

You can either use a client (like acurl) which does this for you automatically, or you can use your own client to make the OAuth API call to generate the token, then use the token retrieved from that API for your management API calls. 

The Basic auth method on the management API is very simple but has strict requirements (no SSO, no MFA) and isn't great security-wise so you should avoid it and prefer the OAuth method instead.