Question
Merative
US
Last activity: 25 Apr 2025 19:15 EDT
Single Login page URL pattern to access PEGA Platform authentication and SSO
Hi All,
Our application is external facing and we need to authenticate users using different SSO providers based on the user's organization. After setting authentication service, the authentication URLs are like,
Organization1: https:/abc.com/prweb/PRAuth/test1sso/ Organization2: https:/abc.com/prweb/PRAuth/test2sso/
Since we cannot communicate different URLs for each user every time they need to login, we need to setup a single PEGA login page URL pattern like "https:/abc.com/prweb/PRAuth/" which will present the user with username. After entering the username and submitting, PEGA should check if the operator is SSO or Non-SSO.
If Non-SSO, reload the login page to collect the password for basic authentication.
If SSO, redirect to the Organization specific SSO authentication service URL for authentication.
Has anyone done a custom implementation like this?
Thanks,
Sathish
Pegasystems Inc.
US
@SathishKumarJ17003558 what you're describing - taking a username, checking whether it maps to an SSO or non-SSO user, then either prompting for a password or redirecting to an SSO endpoint - effectively reimplements some IDP logic at the application layer, which might also pose a security risk.
However, you can add multiple authentication services and let the end user choose. I'd argue that's faster than entering their user name.
