Skip to main content

Questions tagged [sso]

Single Sign-On is a technology to allow a single authentication to be used across multiple independent systems.

-1votes
0answers
61views

How to implement SSO between two web applications, one embedded into the other (iframe)? [closed]

I have a web application protected by Keycloak with Resource Owner Password Credentials Grant. Both the frontend and the backend APIs are protected. I need to embed the frontend into a third party ...
Fabio Nardelli's user avatar
0votes
0answers
62views

SSO Application Storing a Custom Secret in the User Profile

I have an application that employs "zero knowledge" data security, where even with full backend access to our application, customer data cannot be read without knowing their individual ...
Peter Moore's user avatar
0votes
1answer
1kviews

Session Handover via OpenID Connect between a Mobile Application and a Website?

I am trying to assess secure ways to implement a session handover between an app and a website in the same company ecosystem. The Setup Mobile Application A and Website B use the same company OpenID ...
Vankog's user avatar
1vote
1answer
4kviews

Implementing SSO on a REST API

I have a REST API server with its own authentication methods. I need to provide to some third party apps an authentication solution which should be processed on my server, I don't want them to handle ...
Cătălin Muntean's user avatar
1vote
0answers
34views

How to integrate multiple services via API's into a single dashboard on a per-user basis with SSO?

so my project is that I'd like to pull data from a bunch of different services/API's and show them in a single dashboard. SSO is a requirement so I want to make sure the user doesn't have to put in ...
fjlksahfob's user avatar
0votes
1answer
2kviews

Best way to store Session token on mobile App

Background Building a mobile App for product X which is currently hosted as a SaaS solution. The product X does not support OAuth currently, implements basic authentication and generates Session token ...
Anurag's user avatar
4votes
2answers
992views

Integration with multiple SSO's

Currently, we had a web app that integrated with SSO through Open-Id protocol Then we got another client that had it's own SSO and need us to integrate with their SSO through SAML protocol so their ...
Nabawoka's user avatar
3votes
1answer
638views

Silent login in external application

We have a web application and our partners asked us to log in silently from their web applications, which would allow their users to make a single login on l to access our application instead of two. ...
danyolgiax's user avatar
1vote
1answer
1kviews

User registration across multiple services [closed]

I have multiple web services that need to be integrated into one solution. One frontend would provide access to features from all services. Each of the services has its own native authentication, and ...
mirkash's user avatar
1vote
0answers
94views

Single Sign On implementation for CMS

This is a general question seeking guidance for the best practice(s) on implementing a Single Sign On (SSO) across many various installations of the same application. The hypothetical example I would ...
sudoyum's user avatar
1vote
1answer
414views

Single Sign On Logout Strategy

I have been working on a project that integrates spring-cloud-based microservices and MVC applications with SSO. currently, I use spring-session for the session repository service. My current ...
Downhillski's user avatar
11votes
2answers
1kviews

Should an SPA use OIDC's Implicit flow or Auth Code flow?

We are developing a new Angular SPA which leverages Keycloak for its SSO abilities using OpenID Connect (OIDC). The app is currently designed to use the Implicit flow to retrieve short-lived access ...
Eric B.'s user avatar
  • 1,249
0votes
1answer
437views

Single-sign-on login logic and application logic on front-end

Let's say I have multiple Angular/React/Vue applications which I want to enable users to log in once and be able to access all my applications. What I want to solve / ask about is where should I keep ...
Jun's user avatar
  • 117
2votes
1answer
689views

Should an Identity Provider be a separate web application than a Authentication system

I'm currently writing a SAML Identity provider(Idp) to enable SSO and one of the easy ways to go about it is to use Shibboleth Identity Provider which is a ready deployable web application on it's own....
noob Mama's user avatar
3votes
6answers
4kviews

How does authentication Server work on Single Sign on?

I am trying to implement Single Sign On feature(SSO). I have for now three systems that needs this feature. This SSO is relatively new to me, I have done SSO where the domain is same. There browser is ...
Ruchan's user avatar

153050per page
close