Questions tagged [sso]
Single Sign-On is a technology to allow a single authentication to be used across multiple independent systems.
30 questions
0 votes
0 answers
78 views
SSO Application Storing a Custom Secret in the User Profile
I have an application that employs "zero knowledge" data security, where even with full backend access to our application, customer data cannot be read without knowing their individual ...
- 119
1 vote
1 answer
4k views
Implementing SSO on a REST API
I have a REST API server with its own authentication methods. I need to provide to some third party apps an authentication solution which should be processed on my server, I don't want them to handle ...
-1 votes
1 answer
2k views
Best way to store Session token on mobile App
Background Building a mobile App for product X which is currently hosted as a SaaS solution. The product X does not support OAuth currently, implements basic authentication and generates Session token ...
- 99
3 votes
1 answer
649 views
Silent login in external application
We have a web application and our partners asked us to log in silently from their web applications, which would allow their users to make a single login on l to access our application instead of two. ...
- 149
1 vote
0 answers
105 views
Single Sign On implementation for CMS
This is a general question seeking guidance for the best practice(s) on implementing a Single Sign On (SSO) across many various installations of the same application. The hypothetical example I would ...
- 19
11 votes
2 answers
1k views
Should an SPA use OIDC's Implicit flow or Auth Code flow?
We are developing a new Angular SPA which leverages Keycloak for its SSO abilities using OpenID Connect (OIDC). The app is currently designed to use the Implicit flow to retrieve short-lived access ...
- 1,249
2 votes
1 answer
701 views
Should an Identity Provider be a separate web application than a Authentication system
I'm currently writing a SAML Identity provider(Idp) to enable SSO and one of the easy ways to go about it is to use Shibboleth Identity Provider which is a ready deployable web application on it's own....
- 123
0 votes
2 answers
238 views
Multilayer security concept
I'm working on a security concept of a bigger project. It will be done with Spring,but that's actually not relevant right now. The whole system is a hierarchical tree of computer nodes that run a ...
- 439