Skip to main content

SSO via API for Extended entreprise

  • September 20, 2023
  • 7 replies
  • 85 views

ayoubhaouari
Novice II

Can we utilize API for Single Sign-On (SSO) for the Extended Enterprise?

We are interested in granting access to one of our clients to implement SSO on a other application, and we would prefer to implement SSO through APIs without providing them access to the complete set of APIs.

Our client can’t use SAML!

Do any individuals encounter these scenarios?

Did this post help you find an answer to your question?

7 replies

Ian
Guide I
Forum|alt.badge.img+1
  • Guide I
  • 170 replies
  • September 21, 2023

A couple of questions:

  • Are you already using the API and SSO app at the root level?
    • If so, are you currently using the Force External SSO option? 
  • You said your client can’t use SAML; can they use Auth0, LDAP or OpenID Connect instead?

It is certainly possible to use different SSO protocols in a multi-domain scenario, but it may not be consistent with the approach you’re outlining.

Hope this helps in some way.


ayoubhaouari
Novice II
  • Author
  • Novice II
  • 7 replies
  • September 21, 2023

Thank you for your reply.

Our customer doesn't use any of the Auth0, LDAP or OpenID protocols. They wish to use SSO via API, but I think SSO via API only works at the top level and we cannot give them access to the API via oAuth2.

 


Ian
Guide I
Forum|alt.badge.img+1
  • Guide I
  • 170 replies
  • September 21, 2023

I’m not an expert but from what I’ve found in the Knowledge Base, I think you’re right. It’s unfortunate.


ayoubhaouari
Novice II
  • Author
  • Novice II
  • 7 replies
  • September 21, 2023

Thank you for your reply


  • Contributor I
  • 14 replies
  • March 5, 2024
ayoubhaouari wrote:

Can we utilize API for Single Sign-On (SSO) for the Extended Enterprise?

We are interested in granting access to one of our clients to implement SSO on a other application, and we would prefer to implement SSO through APIs without providing them access to the complete set of APIs.

Our client can’t use SAML!

Do any individuals encounter these scenarios?

We have the same scenario. I think it should be implemented for extended enterprise as well.


ayoubhaouari
Novice II
  • Author
  • Novice II
  • 7 replies
  • March 5, 2024
zhou80bin wrote:
ayoubhaouari wrote:

Can we utilize API for Single Sign-On (SSO) for the Extended Enterprise?

We are interested in granting access to one of our clients to implement SSO on a other application, and we would prefer to implement SSO through APIs without providing them access to the complete set of APIs.

Our client can’t use SAML!

Do any individuals encounter these scenarios?

We have the same scenario. I think it should be implemented for extended enterprise as well.

 

We were able to find a solution through a custom application that provides us with Single Sign-On (SSO) for our extended enterprise.

If you are interested let me know !

 

 


  • Contributor I
  • 14 replies
  • March 5, 2024

It's great. I do want to learn more for your solution.

Thanks.

ZB


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings