Support for browser authentication

[mirontoli-skanska]

In scenarios like mine, SSO and MFA do not allow login with username/password.

[probichaux]

This is a little tricky. Normally when people use the Keepit API they create a separate API token with restricted RBAC rights, then they use that username/password in the API (including in this toolset). We don't have a library like Microsoft's ADAL to support browser auth, but it might be possible to figure out a way to do this.

[mirontoli-skanska]

I used an api token to login, but the problem is (or was) that it's too complicated to create a restricted token, you have to be Master Admin to create a token and then downgrade that account. Is it easier to create a restricted token today?