Active Directory as OpenID provider?

Question

Can an Active Directory be used as a OpenID provider? WIF is an option, but it's quite complicated and not very widespread.

Answer 1

Yes, you can. Just host an ASP.NET web site that itself uses Active Directory authentication, and exposes an OpenID Provider using DotNetOpenAuth.

Answer 2

There is also OpenID-LDAP server which claims to work with AD LDAP.

Answer 3

ADFS 4.0, available from Windows Server 2016 onwards, allows authentication using OpenID.

Answer 4

Or you can use RedHat Keycloak, which leverages any LDAP or Kerberos Server as a repository to be used with OIDC or even with poor man's auth SAML.