|
|
|
|
|
by l3s2d
2038 days ago
|
|
I think OIDC should be the default authentication for services like this. It is the newest, and simplest, of the three. Any sort of integration with existing SAML or LDAP can be done via a bridge. Keycloak supports this, I believe. |
|
Active Directory has OIDC support since version 2016 (and SAML since earlier), which makes it the de facto supported protocol in companies.
SAML is rightfully losing adoption because it's way more difficult to use. LDAP is moot for a variety of reasons, though it's still used by some internal services.