Horde OpenIdConnect AuthMethod with Microsoft ADFS

Hi,

we are trying to setup Horde with AuthMethod OpenIdConnect and Microsoft ADFS.

The consultant who is helping us asks what type of flow needs to be used and linked this page:

https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/overview/ad-fs-openid-connect-oauth-flows-scenarios

On the page it lists

  • Implicit grant flow
  • Authorization code grant flow
  • On-Behalf-Of flow
  • Client credentials grant flow
  • Resource owner password credentials grant flow (Not recommended)
  • Device code flow

What is the right flow to use?