Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Alex Munford (AlexM001)
Sprint

Sprint
US
AlexM001 Member since 2015 19 posts
Sprint
Posted: Aug 20, 2019
Last activity: Aug 26, 2019
Posted: 20 Aug 2019 9:20 EDT
Last activity: 26 Aug 2019 9:36 EDT
Closed

IdP initiated sessions with OpenID Connect

Is it possible to configure an OpenID Connect Authentication Service in 7.4 to work with IdP initiated sessions?

***Edited by Moderator: Lochan to update platform capability tags***

To see attachments, please log in.
Pega Platform
Security

Posted: 5 years ago
Posted: 26 Aug 2019 7:12 EDT
Nithin Thalankilakshminarasimha Gupta (thaln)
Pegasystems Inc.
Principal Technical Solutions Engineer, Global Client Support
Pegasystems Inc.
IN

Pega would be expecting the RelayState ID in the SAML response. With IDP initiated, it depends on how the configuration is made with the RelayState ID. With SP initiated, this is expected in the response.

To see attachments, please log in.
Posted: 5 years ago
Posted: 26 Aug 2019 8:20 EDT
Alex Munford (AlexM001)
Sprint

Sprint
US

We currently use IdP initiated SSO with SAML. The question is does Pega support IdP (OpenID Provider in OIDC terminology) initiated SSO with OpenID Connect (OIDC).

To see attachments, please log in.
Posted: 5 years ago
Posted: 26 Aug 2019 9:36 EDT
Nithin Thalankilakshminarasimha Gupta (thaln)
Pegasystems Inc.
Principal Technical Solutions Engineer, Global Client Support
Pegasystems Inc.
IN

Hi Alex,

As per my understanding in Pega OpenID Connect (OIDC) does not support IDP-initiated-SSO in a similar way as SAML 2.0 does.

As in my earlier post the state is always referred in the response redirected from the IDP. 

Thanks,

Nithin

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice