Hi,

We have built a custom iOS (Swift) app for ServiceNow which uses a web view (WKWebView) to wrap the ServiceNow portal mobile web site. Currently ServiceNow uses basic auth, so the iOS app captures the user's credentials and stores them in the iOS key chain, then replays them to keep the user logged in. We also have the requirement that e-mail links to ServiceNow are launched via the iOS app.

Moving to Okta, we are trying to find a solution which ensures the user stays logged in. Some options we've considered:

1. Re-use the existing app - however users are prompted to log in again once the session timeout expires

2. Use Okta Mobile - however we can't launch ServiceNow links from e-mail into this app

3. Okta Device Trust - however we are not licensed for this, and haven't been able to confirm it would work in this scenario (https://help.okta.com/en/prod/Content/Topics/Mobile/Okta_Device_Trust_Native_Apps_Safari_MDM_Devices.htm)

4. Okta Mobile Connect - not enough detail is provided on how this would work (https://developer.okta.com/use_cases/mobile/okta_mobile_connect)

5. Building Okta authentication natively into our iOS app - we could maintain the user's session via a refresh token, however unsure how we would create the SAML assertion to seamlessly sign them in to ServiceNow

6. Use a Progressive Web App - investigation underway, however appears that this will also not keep the user logged in

My question, has anyone else done something like this or do you have any suggested solutions? In particular I feel that option (5) will be the best bet, however not sure how we would achieve it.

Thanks,

C.J. Ruggles

Reece Group