{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2319","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2319/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2319/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2319/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2319","id":122641362,"number":2319,"title":"automated (sw) login from a client with no human interaction, using username/pw credentials. ","user":{"login":"pashute","id":1774131,"avatar_url":"https://avatars.githubusercontent.com/u/1774131?v=3","gravatar_id":"","url":"https://api.github.com/users/pashute","html_url":"https://github.com/pashute","followers_url":"https://api.github.com/users/pashute/followers","following_url":"https://api.github.com/users/pashute/following{/other_user}","gists_url":"https://api.github.com/users/pashute/gists{/gist_id}","starred_url":"https://api.github.com/users/pashute/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pashute/subscriptions","organizations_url":"https://api.github.com/users/pashute/orgs","repos_url":"https://api.github.com/users/pashute/repos","events_url":"https://api.github.com/users/pashute/events{/privacy}","received_events_url":"https://api.github.com/users/pashute/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-12-17T01:26:01Z","updated_at":"2015-12-17T13:20:37Z","closed_at":null,"body":"It is a business requirement by us that the automated, software controlled  (no human intervention) login is done by passing credentials (username / pw) and authenticating that against the user-store (in our case Active Directory). \r\n\r\n1. Can this be done?\r\n2. Any pointers? \r\n3. I'm thinking perhaps putting the username pw in the client secret and using regular client flow authentication. Now which class would handle the client flow authentication (a regular IUserService with preauthenticate?)"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/165451709","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2319#issuecomment-165451709","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2319","id":165451709,"user":{"login":"urbanhusky","id":2065748,"avatar_url":"https://avatars.githubusercontent.com/u/2065748?v=3","gravatar_id":"","url":"https://api.github.com/users/urbanhusky","html_url":"https://github.com/urbanhusky","followers_url":"https://api.github.com/users/urbanhusky/followers","following_url":"https://api.github.com/users/urbanhusky/following{/other_user}","gists_url":"https://api.github.com/users/urbanhusky/gists{/gist_id}","starred_url":"https://api.github.com/users/urbanhusky/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/urbanhusky/subscriptions","organizations_url":"https://api.github.com/users/urbanhusky/orgs","repos_url":"https://api.github.com/users/urbanhusky/repos","events_url":"https://api.github.com/users/urbanhusky/events{/privacy}","received_events_url":"https://api.github.com/users/urbanhusky/received_events","type":"User","site_admin":false},"created_at":"2015-12-17T13:20:37Z","updated_at":"2015-12-17T13:20:37Z","body":"The independent client without any relation to a human user should use client credentials flow. You do get claims from that, you cannot request the openid scope."}}