How would LDAP avoid browser round trip

[DrDaveD]

The document says:

A further challenge is providing Users with initial Access Tokens required for many flows; unless Users are recorded e.g. in an LDAP service trusted by the Authorization Server, a round trip to a browser is required to authenticate the User.

I don't understand how that would work. How would the Authorization Server know who the user is initially without a round trip to the browser?

[hannahshort]

I meant more that an OIDC flow with username/password could be triggered, instead of a Device Code flow. I agree it's not very clear

[DrDaveD]

Both OIDC flow and Device flow require round trips to browsers, right? I still don't understand the point you were trying to make. I suggest that you propose here a replacement.