Forum Discussion
NacreousAPI Pre-Authentication
Ok then APM will definetely could do the work and provide any authentication method translation.
APM would provide solution on this, especially in cases where application itself cannot handle modern auth by itself.
But as I understand the case. If you have used oauth for both user and api calls it should be easier.
So user goes to web app -> redirect to idp -> authenticates -> gets access token, id token etc -> login to web app -> web app use access token to access apis
And this should work with any vendor solution.
NacreousNot both. The first form of auth to web application front door was SAML. The second form of auth to the proxy was a JWT. The third form which I didnt discuss was an OAuth/OIDC mechanisim between the Proxy and the IDP used to get the JWT for the Proxy. As the IDP was the source of the original SAML authentication the proxy simply needed to go back to the same IDP and the user would be recognised as being logged in.
Oauth saml bearer assertion flow might also been used in this case. So saml assertion could be exchanged for an access token.
- Kevin_Davies
If only it was supported.
Ok then why not switching saml auth to oauth?
