[AMQ-9400] Support for Oauth/OIDC integration for authentication/authorization

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 6.0.0
• Component/s: Security/JAAS

Environment

Red Hat Enterprise Linux, though this should apply to all platforms.

• Assignee: Samir Boudjebla
• Reporter: Scott Fields
• Created: 21/Nov/23 17:29
• Updated: 27/Jul/24 10:51

Description

OAuth (and OIDC) has become the standard way to authenticate applications for enterprise organization, so every software component (application, api, middleware) in the enterprise from a best practices standpoint should support it.

 

How much sense it makes for each use case, that there are other protocols (Kerberos, SAML, JAAS), that it may impact performance, that it is only used internally, that oAuth has different workflows, that it can complicate things and slow things down, but that shouldn't matter from a supported methods standpoint.

This has become a mainstream solution, which should have integrated support within the product.