The following decision tree can help you identify an appropriate setup; however, these are recommendations only. Your specific setup highly depends on your use case.
Use the PrincipalPropagation authentication type with SAP systems and OAuth2SAMLBearer Assertion with third-party systems.
Setting Up Identity Propagation: Neo Environment
Related Information
Principal Propagation via the Cloud Connector