To fully integrate Katello, Foreman API must be accessible with oauth. Once oauth is enabled in the Foreman configuration and secret and token is given, Foreman should authenticate all requests with valid oauth and automatically authorize those requests as "admin". Separate role can be used for this, but all permission must be given. Katello is expected to be able to do anything.