I am working with a mobile developer on a React Native application which is using our Okta organization for authentication. The React Native application is using Okta's React Native SDK to sign in, which is setup as an OIDC native app in our Okta organization.

We also have a SAML application configured in our Okta organization. The issue we are having is authenticating between the React Native application and the SAML application. Specifically, we are trying to web wrap the SAML application in the React Native application. What is happening is that the web wrapper does not know about the OIDC token or session that is generated when the mobile application authenticates, so it is redirecting the user to the login page for the SAML application instead of signing them in automatically.

I have yet to find any documentation or resources on how we may be able to pass the OIDC token to the SAML endpoint for authentication, or if this is even possible. From what I have been able to find, it seems like we need to build up a fresh SAML assertion/request to load in the web wrapper, althought I am unsure what this involves and/or how the OIDC token can be used to build up a valid SAML request so the user does not have to sign in again.

Does anyone have experience implementing this type of requirement or more information on where I can find some answers, if this is possible?

Any and all feedback is greatly appreciated, and thank you in advance!

Regards,

Larry