Chris Neveu

OAuth has become the de facto standard for machine to machine auth and automation. Support for OAuth would also allow the use of multifactor auth with the API across a number of Identity Providers such as Azure AD, just by being able to leverage existing multifactor claims in the JWT. This would allow a great number of use cases across the board and make the API very robust.

This request is to have support for Azure AD based authentication (OAuth) for login to PasswordState. I feel this would be a robust way to have users login and would allow the use of Azure Conditional Access Polices and Azure MFA. OAuth is a cleaner implementation than SAML from an administrative perspective and is well supported in modern applications.