3 ms·
OIDC is not really a replacement for LDAP. SAML2 could be, but OIDC in itself has no concept like group membership. Kerberos, yes, but LDAP no. What are your
by vetinari 2y ago
OIDC is not really a replacement for LDAP. SAML2 could be, but OIDC in itself has no concept like group membership.
Kerberos, yes, but LDAP no.
What are your pain points integrating with LDAP? It is pretty simple.
- candiddevmike 2y agoOIDC _can_ have group memberships if the provider/client support it via claims. LDAP is a pain because you have to expose/support a lot of knobs for integration (bind vs anonymous, secure vs unsecure, group format, root DNs, etc.). OIDC is (in theory) a lot simpler for the most part as the bare minimum is discovery URL, client ID, and client secret.
- bigfatkitten 2y agoAnd LDAP is a nonstarter for passwordless auth.