Java SDK Enterprise and SSO
We are a third party application and I managed to use the Java SDK to implement standard Oauth2 and content retrieval from Box.
I also managed to support BoxEnterprise using JWT authentication mechanism. In this case our application holds the config.json and the user has to provide their user id.
A new category of clients use Box Enterprise with SSO and we need to add support for them. We can not find any example or documentation about how and if that could be done using Java SDK.
Is there any working example ?
Thank you
-
The tutorial "Setting Up Single Sign On (SSO) for your Enterprise" states that
IdP Requirements:
- Must support SP initiated SSO
- Must support SAML 2.0
Currently Box does NOT support OAuth 2.0-based SSO.
-
In general, API authentication should be totally separate from SSO. If your application is using Standard OAuth2, then the user will go through the SSO flow in their browser/web view and your application will receive an auth code once they've entered their credentials. If you're using JWT to generate access tokens for enterprise users, whether the enterprise uses SSO or not should be irrelevant to you generating the access token using your app auth credentials.
Are you running into some specific problem integrating with an enterprise that uses SSO?
Please sign in to leave a comment.
Comments
2 comments