OIDC Resource Owner Password Grant

[Paul B. Henson]

We've got a request to set up an integration with Jamf:

	https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Integrating_with_a_Custom_Identity_Provider.html

They don't support SAML, and this is the first OIDC app we've had, so
I've got to spin up OIDC from scratch on our idp just for this <sigh>.
Guess something had to be first.

However, they say they require the Resource Owner Password Grant which
allows them to authenticate directly with user/password rather than go
through the normal idp web UI, which is used to syncronize local client
passwords with the central enterprise password.

I don't recall seeing a mention of ROPG in the idp OIDC documentation,
although I could have easily missed it. Does this idp support this? It
seems similar to SAML ECP which I have configured, although ECP supports
Duo MFA. Even if the idp does support ROPG, if we can't enforce MFA,
then our security group might not want to go down this road.

Thanks...

-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768