Link that authenticates from one app to another? Strategies/Security Considerations?

1

OAuth

#Network & Admin #Identity And Access Management #Tool 21 social mentions

2

JSON Web Token

JSON web tokens can be useful for this sort of thing. You’ll want to coordinate with the other app on the encryption algorithm, pre-shared key, and the payload. If you have a shared user identifier, like an email address, then the other app can generate the token with that identifier in the payload, and include it in the params of the link that the user clicks to get to your app. When you get the token, you can verify it and decrypt it to get the info you need to look up the user in your app, then generate a session for the user, etc.

#Identity Provider #Identity And Access Management #SSO 276 social mentions