{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2319","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2319/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2319/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2319/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2319","id":122641362,"number":2319,"title":"automated (sw) login from a client with no human interaction, using username/pw credentials. ","user":{"login":"pashute","id":1774131,"avatar_url":"https://avatars.githubusercontent.com/u/1774131?v=3","gravatar_id":"","url":"https://api.github.com/users/pashute","html_url":"https://github.com/pashute","followers_url":"https://api.github.com/users/pashute/followers","following_url":"https://api.github.com/users/pashute/following{/other_user}","gists_url":"https://api.github.com/users/pashute/gists{/gist_id}","starred_url":"https://api.github.com/users/pashute/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pashute/subscriptions","organizations_url":"https://api.github.com/users/pashute/orgs","repos_url":"https://api.github.com/users/pashute/repos","events_url":"https://api.github.com/users/pashute/events{/privacy}","received_events_url":"https://api.github.com/users/pashute/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-12-17T01:26:01Z","updated_at":"2015-12-17T08:08:53Z","closed_at":null,"body":"It is a business requirement by us that the automated, software controlled  (no human intervention) login is done by passing credentials (username / pw) and authenticating that against the user-store (in our case Active Directory). \r\n\r\n1. Can this be done?\r\n2. Any pointers? \r\n3. I'm thinking perhaps putting the username pw in the client secret and using regular client flow authentication. Now which class would handle the client flow authentication (a regular IUserService with preauthenticate?)"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/165379256","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2319#issuecomment-165379256","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2319","id":165379256,"user":{"login":"urbanhusky","id":2065748,"avatar_url":"https://avatars.githubusercontent.com/u/2065748?v=3","gravatar_id":"","url":"https://api.github.com/users/urbanhusky","html_url":"https://github.com/urbanhusky","followers_url":"https://api.github.com/users/urbanhusky/followers","following_url":"https://api.github.com/users/urbanhusky/following{/other_user}","gists_url":"https://api.github.com/users/urbanhusky/gists{/gist_id}","starred_url":"https://api.github.com/users/urbanhusky/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/urbanhusky/subscriptions","organizations_url":"https://api.github.com/users/urbanhusky/orgs","repos_url":"https://api.github.com/users/urbanhusky/repos","events_url":"https://api.github.com/users/urbanhusky/events{/privacy}","received_events_url":"https://api.github.com/users/urbanhusky/received_events","type":"User","site_admin":false},"created_at":"2015-12-17T08:08:53Z","updated_at":"2015-12-17T08:08:53Z","body":"I agree that, technically, this is a client and not a user. Beware that you won't be able to use openid scopes if you use client credentials flow (and you won't be able to query the userinfo endpoint)"}}