[user5994461]

OIDC for everything.

Kerberos is limited to internal network and some very specific use cases (desktop auth). It's not competing.

If the company has fully integrated Active Directory/Kerberos. On any desktop computer, it's possible to get an OIDC/JWT token for the current user with a single API call. It's transparent, the user doesn't need to enter their password because they are already authenticated on the machine. That is to say, no application ever needs to support Kerberos in the current age.