Team,

I am developing an SAAS based iOS native app which has backend (REST API/CMS) in python. The database used is MYQL.

I want to implement SSO using OKTA, my clients has there employee record present on premise active directory. So basically i have user/employee records at two places one in MYSQL and other one in client premise ACTIVE DIRECTORY

I want when the user(client/employee) comes on my iOS native app , enter there credential the credential must get authenticated with client on client premise ACTIVE DIRECTORY . If get some success response then allow to use app , get the data from the python backend.

Normally the credential are matched in MYSQL DB and in return JWT token is return for authorization of other api's.

How this all flow will work where i can authenticate with the credential store in client on premise active directory and then how python backend will authorize if the user is valid.

Thanks

Deepak