Level 3 Service Education Draft

[zsamji]

Now that you've completed Level 1 (Intro to concepts) and Level 2 (created a sample app), you are reading to make use of the key features of our Common Hosted Single Sign On (CSS) App

• Establish the type of Login usecase (Auth type) you require for you application

  • Browser Login - use the OIDC Authorization Code Flow
  • Service Account - authenticate to Keycloak and retrieve access token dedicated to this client. In terms of OAuth2 specification, this enables support of Client Credentials Grant for this client
  • Browser Login & Service Account - use the OIDC Authorization Code Flow and authenticate to Keycloak and retrieve access token dedicated to this client

• At time of login decide if you need to use the identity provider hint

• Do you need roles associated to your integration?

• Do you need to use the CSS API Account?

• Are you using the SAML protocol?

  • - Link TBD
  • SSL Certificates