Forum Discussion
NacreousAPI Pre-Authentication
Ok then APM will definetely could do the work and provide any authentication method translation.
NacreousNot both. The first form of auth to web application front door was SAML. The second form of auth to the proxy was a JWT. The third form which I didnt discuss was an OAuth/OIDC mechanisim between the Proxy and the IDP used to get the JWT for the Proxy. As the IDP was the source of the original SAML authentication the proxy simply needed to go back to the same IDP and the user would be recognised as being logged in.
Oauth saml bearer assertion flow might also been used in this case. So saml assertion could be exchanged for an access token.
- Kevin_Davies
If only it was supported.
Ok then why not switching saml auth to oauth?
- Kevin_Davies
Server application does not support oauth.
