Which three authentication protocols can be configured in the Cisco Application Policy Infrastructure Controller?

[Reference: http://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/unified-fabric/white-paper-c11-730021.html (System Access: Authentication, Authorization, and RBAC), , The Cisco APIC supports both local and external authentication and authorization (TACACS+, RADIUS, Lightweight Directory Access Protocol [LDAP]) as well as role-based administrative control (RBAC) to control read and write access for all managed objects and to enforce Cisco ACI administrative and per-tenant administrative separation. The Cisco APIC also supports domain-based access control, which enforces where (under which subtrees) a user has access permissions., ]