Forum Discussion
Kevin_Davies
Nacreous
NacreousAPI Pre-Authentication
Some time ago I was dealing with legacy web applications being retrofitted with modern authentication. As you can imagine this opens up a world of pain when the developers of said applications have l...
Kevin_DaviesNacreous
NacreousNot both. The first form of auth to web application front door was SAML. The second form of auth to the proxy was a JWT. The third form which I didnt discuss was an OAuth/OIDC mechanisim between the Proxy and the IDP used to get the JWT for the Proxy. As the IDP was the source of the original SAML authentication the proxy simply needed to go back to the same IDP and the user would be recognised as being logged in.
Injeyan_KostasNacreous
NacreousOauth saml bearer assertion flow might also been used in this case. So saml assertion could be exchanged for an access token.
- Kevin_Davies
If only it was supported.
