jimdigriz / freeradius-oauth2-perl

FreeRADIUS OAuth2 (OpenID Connect) using rlm_perl
GNU Affero General Public License v3.0
129 stars 35 forks source link

[Documentation] Keycloak also supports Resource Owner Password Credentials Grant #25

Open rhbvkleef opened 2 years ago

rhbvkleef commented 2 years ago

The README states that only Azure AD supports the Resource Owner Password Credentials Grant, but at least keycloak also supports it. Other IDP's might also support it by now. It might be slightly misleading to state that only Azure AD supports it for that reason.

jimdigriz commented 2 years ago

Patches welcome...

I suspect if you have deployed Keycloak you have other options available that make this module pointless; you would just have FR interact directly without using OAuth2.

Your typical user of this module has outsourced IDM and have no internal resources (or willingness as life is too short and no one makes money by maintaining their own IDM) to allocate to such a deployment.

Users of this module just want working 'Enterprise' wifi with minimal effort. Azure ticks a lot of boxes on that front, running Keycloak is quite in the opposite direction.