We have five internal web applications written in Java / AngularJs that are secured via Kerberos/ Spnego ( Spring Security implementation) . We are looking to transition these apps to AWS ( EBS) .
I am building a business case to convince the management why I should rewrite the auth. on these apps to use OAuth2/OpenId . Looks like Kerberos is supported via Amazon EMR.. or at the worst we just provision another EC2 with a domain controller. What are my considerations , pros and cons.