SAML 2.0 SSO Without SSO Extension and without Q2SSOResponse class

Question

Dear Team We are implementing an SAML 2 0 SSO flow from Q2 to our web application thru OKTA as service provider We followed the SSO Extension tutorial in the documentation We noticed that at the end of the day the SSO extenion is simply posting a form with the SAML assertion against the ACS url We were also able to achive the same result with the Client Side Rendering extension We prefer to not use templates and server side rendering Also we did not use the Q2SSOResponse class The documentation of the Q2SSOResponse says The shape HQ expects back from an SSO call Can yuo please confirm that it is ok to implement SSO without the official SSO extension Any caveats Thank you

Trey Teter · Accepted Answer

You can definitely implement an SSO without the "official" SSO extension. There is a few helpers most of which you pointed out that help with making an SSO easier to do. The only thing you really lose is the ability to immediately open the SSO in a new tab or in an Overpanel. Some of this you could do anyway, it just would require some extra work.

There is some written documentation that I would recommend you to read before tackling this project. Our Enhanced SSO documentation:
https://docs.q2developer.com/guides/frontend_development/enhanced_sso.html
This seems to be doing exactly what you want taking a normal SSR or CSR tecton extension and turning it into an SSO.

Hopefully this makes sense,
Trey Teter

		
				0
				
Posted 
	4 years ago

					⠿More
				  		
			 Report
		
					Trey Teter
				
					124
 × 2
					Administrator

Answers