Derek is making an effort to select an authentication method for his company. He needs one that will work with a broad range of services like those provided by Microsoft and Google so that users can bring their own identities. Which of the following would be his best solution?

For Derek's requirements, the best solution would be OpenID Connect.

OpenID Connect is an authentication protocol built on top of OAuth 2.0, which provides a standardized way for users to authenticate themselves to multiple applications and services using a single set of credentials. OpenID Connect is widely supported by a number of different identity providers, including Microsoft and Google, and it allows users to bring their own identities to the applications they use.

OAuth, on the other hand, is primarily used for authorization, rather than authentication, and while it could be used in conjunction with OpenID Connect for authentication, it is not a complete solution on its own.

RADIUS is a legacy protocol primarily used for network access control and is not well-suited for modern authentication requirements.

Shibboleth is a web single sign-on (SSO) system primarily used in academic and research environments, and is not as widely supported as OpenID Connect.