oauth - SSO to 3rd party through AzureAD - Stack Overflow
I am confused in the actual flow to implement for what I want :
I have a private Laravel app with its own users which crefentials are stored in my database. Users when logged, can click a button to be redirected and immediately logged to a 3rd party website through SSO. That 3rd party website implements OIDC through AzureAD but I am still not sure how to implement it and which flow fits my case (authorization code, etc)
After some research, I noted the following steps :
- create a service account in AzureAD to get my client id and secret
- sync my current users to AzureAD to my app' specific tenant, with a random generated password (it does not matter since they will never use it and will not be aware of it) to get their azure object ids which I will save to database
- using the service account credentials, request for an access token to consume the API that allows to retrieve an azure object user' specific ID token
- redirect through form POST to 3rd party website passing the ID token with immediate auto submission of the form
- 3rd party website validates the ID token with AzureAD and logs the user
Please let me know if any step is missing or if it is the right implementation ?
最新文章
- 大本营不保?美国安卓系统激活量超iOS
- 传言成真:微软宣布以72亿美元收购诺基亚手机部门
- 网络视频两大阵营形成 将引导行业良性发展
- python - Html in the inspect element is different that the one displayed on screen - Stack Overflow
- python - Problem of redirect when trying to authenticate user using supabase - Stack Overflow
- How to solve input buffer for assembly - Stack Overflow
- php - Yii2 ActiveForm Model doesn't exist - Stack Overflow
- flutter - App Name Not Updating in Android Recent Apps View Despite Manifest and Strings Configuration - Stack Overflow
- bitcoin - Problem with sign PSBT.Error sign transaction - Stack Overflow
- c++ - Refactor return type using clang transformer - Stack Overflow
- How to configure PhpStorm to work with Node.js and ESLint inside a running Docker container? - Stack Overflow
- kotlin - How to deal with Compose Desktop MenuBar - Stack Overflow
- ruby - How to render HTML with Haml::Engine from Haml 6.3? - Stack Overflow
- javascript - Three Contenteditable Divs that connect as one larger text box with maxChars of 274 - Stack Overflow
- Stripe Connect, Register fake account on test mode - Stack Overflow
- Rust error: lifetime may not live long enough, how to express lifetimes? - Stack Overflow
- tsx - Does Inversify actually require emitDecoratorMetadata for Typescript? - Stack Overflow