How does SSO work with JWT?

How does SSO work with JWT?

Single sign-on is a mechanism that allows you to authenticate users in your systems and subsequently tell Zendesk that the user has been authenticated. If you use single sign-on with JWT, a user is automatically verified with the identity provider when they sign in.

How do I get a JWT token?

Retrieve a JWT Access Token Using the Auth REST Call

1. From the navigation menu, select Applications. On the Applications page, select your application. Then select the Details tab.
2. Make note of the Client ID and retrieve the Client Secret from your tenant administrator. WARNING:

How to create a SSO handler with JWT?

There are several steps to developing an SSO handler. In this tutorial, the first step is to extract the cookie of an authenticated user so a token can be created later on. The next step is to generate an object that contains the required information for a JWT token.

When to use JWT for cross domain authentication?

There is a lot of information on the web about using JWT ( Json Web Token) for authentication. But I still didn’t find a clear explanation of what the flow should be when using JWT tokens for a single sign-on solution in a multiple domains environment.

How should the JWT token be stored on the client?

So now the user is back on example1.com and is authenticated! He can make requests, passing the JWT token in a Authentication header and the server is able to verify the signed JWT and therefore is able to identify the user. Nice! How should the JWT token be stored on the client?

How to use single sign on in JWT?

We need a single sign-on solution, which means if a user authenticates on example1.com, we want him to also be authenticated on example2.com, automatically. Using the OpenId Connect flow, I understand that the user who wants to authenticate on example1.com will first be redirected to the authentication server (or OP : “OpenId Provider”).