Question
The Hongkong and Shanghai Banking Corporation Ltd India
IN
Last activity: 13 Jun 2024 5:16 EDT
How to configure SSO in mashup for authentication
We have a requirement to implement SSO authentication in web Mashup, could you please help us with the steps that needs to be followed to implement this requirement?
***Edited by Moderator Rupashree S. to add Capability tags***
Pegasystems Inc.
IN
@GarimaM0 - Need to change the data-pega-url parameter to the SSO URL . Before creating the mashup code for the URL text input we can directly provide the SSO URL and it generates the URL using the SSO authentication. And if it requires any tokens pass it in the "data-pega-action-param-parameters" in JSON format using key value pairs.
https://docs.pega.com/bundle/platform/page/platform/user-experience/authentication-mashups.html
Thank you.
The Hongkong and Shanghai Banking Corporation Ltd India
IN
@Priyanka Boga how can we pas the token in key value pair, could you please give some example for the same.
Pegasystems Inc.
IN
@GarimaM0 - Adding the screen shot how to add the dynamic parameters to data-pega-action-param-parameters attribute.
Thank you.
The Hongkong and Shanghai Banking Corporation Ltd India
IN
@Priyanka Boga when I am using generic SSO url (not the node specific one), while loading the mashup its giving me error stating -""node name" refused to connect"
Pegasystems Inc.
IN
@GarimaM0 - Open the application definition and in security tab verify the content security policy and try giving pxDefaultAllowAll and below radio button select report only. If still not fixing enable browser developer tools and share the screen shot of console tab.
Thank you.
The Hongkong and Shanghai Banking Corporation Ltd India
IN
@Priyanka Boga the above setting is already enabled, still its not working, won't be able to share the the screen shot as its the proprietary information.
Pegasystems Inc.
IN
@GarimaM0 - Okay, any error is present in console and can by masking the important data? Also in network logs any different status calls other than 200?
I hope the different domain where the mashup is hosted is added in the application definition rule security tab under "Mashup security" .
Thank you.
The Hongkong and Shanghai Banking Corporation Ltd India
IN
@Priyanka Boga yes the domain is added in the application definition rule security tab under "Mashup security"
I am only seeing chrome-error://chromewebdata/ with no error code.
But when I picked the mashup url from the console its loading the mashup correctly.
Pegasystems Inc.
IN
@GarimaM0 - Navigate to Configure -> System -> Settings -> Cross-Site Request Forgery and enable "Enable samesite cookie attribute" and set the dropdown to None. Please confirm if this added or not.
Thank you.
The Hongkong and Shanghai Banking Corporation Ltd India
IN
@Priyanka BogaYes, Enable samesite cookie attribute is enable with dropdown value as none