<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008G7VT6SANOkta Classic EngineIntegrationsAnswered2024-03-25T14:00:59.000Z2018-04-23T20:37:39.000Z2018-04-24T16:13:48.000Z

xzl49 (xzl49) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:20 AM
switch apps without re authentication
i have the need of switching apps after authentication.

scenario.

app1 starts SSO i get the access/refresh tokens the user switchs to app2 the sessions expires and i use the refresh token, the problem starts here, the refresh token was generated using the client credentials of app1 so making the request to okta using the refresh token and client credentials from app2 returns an incorrect credentials error.

is there an specific flow/config i need to follow to achive this?
  • 2 answers
  • 878 views

  • adrian.mocanu1.4634213207175237E12 (Okta, Inc.)

    Thank you for reaching out to Okta Support, my name is Adrian and I'll be handling your case.

    In order to properly response to this question you will have to open a support ticket in order to see the exact flow and troubleshoot on the issue.

    Are both apps SAML apps or SAML and bookmark?

  • xzl49 (xzl49)

    Hi Adrian, i will try to explain i little better, app1 and app2 are my current company applications, in okta i created oktaApp1 and oktaApp1 both apenId/OAUTH2 i have the same users assigned to both oktaApp1 and oktaApp2 (for now) and i have two sets of client credentials, independently, both apps work fine connecting to okta and authenticating the users, i know i can accomplish what i want for example if i use just oktaApp1 in both of my applications, now my need is for example have user1 and user2 user1 assigned in both oktaApp1 and oktaApp2 and user two only to oktaApp2 so the user1 should be able to swith apps (company apps) with out re-authenticating but because the two sents of client credentials i get with openId/OAUTH i cant validate the refresh token once user1 goes to app2. going back to your question about SAML, the answer is no i used openId/oauth when i was configuring the oktaApps, is the flow that im trying to implement only possible by setting both oktaApps as SAML ? thanks in advance for any help you can provide. Sent from Outlook
    Expand Post
This question is closed.
Loading
switch apps without re authentication