Is password grant type not supported for OIDC ?

[Sachin Ghumbre]

Hello Broadcom Team,

 

As far as concern to the CA API Gateway OAuth Toolkit 4.3 documentation, password grant type is not supported for OIDC implementation.  

Can you please confirm whether it is still true or changed in new minor version of OTK?

Documentation link: https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-api-management/api-management-oauth-toolkit/4-3/openid-connect-implementation/open-id-connect-implementation-details.html

------------------------------
Sachin
Technology Lead
------------------------------

[Deactivated User]

These are the supported OpenID Grant Type

You can customize this by updating #OTK openid grant_types_supported

I know in my previous implementation we faced the same issue with password grant_type not supporting openid OOB. but you can customize it over here as per you requirement
​

------------------------------
Pre-Sales Consultant
CA Southern Africa
------------------------------

[Sachin Ghumbre]

you mentioned These Are Supported Grant Types. Please let me know which are supported grant types. And why in documentation supported grant type list is not mentioned.

Thanks & Regards

SACHIN S. GHUMBRE  

[Deactivated User]

Hi Sachin,
OIDC by default supports OIDC Authorization Code Flow, or OIDC Implicit Flow by Design. Hence I don't think there is a Password grant type that is part of the OIDC implementation. But in case you want to you can update it using OTK OpenID supported grant types 

Hope this helps


Ref:
https://medium.com/@robert.broeckelmann/when-to-use-which-oauth2-grants-and-oidc-flows-ec6a5c00d864

------------------------------
Pre-Sales Consultant
CA Southern Africa
------------------------------

[Sachin Ghumbre]

Thanks Ronald for you help!

Adding password as a grant type in customized policy #OTK openid grant_types_supported will solve the problem and no other configuration and settings are required ?

Thanks & Regards

SACHIN S. GHUMBRE  | TECHNOLOGY LEAD

INFOSYS LIMITED

Mobile #: [phone]

[Sachin Ghumbre]

was not able to see in mailbox. I can see the images on browser. 

Thank you in advance