As a Pega client, you need a way to open a case (a work object) using a link. This case link is able to pass the work object ID (for example, C-123) to a non-Pega system. When clicked, the case link, consisting of the case ID, authenticates your credentials using SSO and opens the Pega application and the case in Review mode, which is a read-only view.
Using this feature, called SnapStart, you can form a URL that calls an activity, like doUIAction, with parameters for opening an assignment that displays after SSO authentication. This works with all types of SSO authentication.
In addition, Pega offers a standard activity @baseclass.pyMobileSnapStart that makes using this feature much easier to implement.
Using the feature
Specify the following parameter:
Example with parameter values
This setting opens the assignment and the full application user portal with the assignment open.
Security risk to work around
The biggest issue with these SnapStart URLs is that they are in clear text. By default, your Pega applications must pass Basic Access Control (BAC) security validation with a deployment level of 4 (for UAT and Production environments). Therefore, you cannot send clear text URLs with a pyActivity parameter because this poses a security risk. You do not want to disable BAC security validation to force your URLs to work.
Options for SnapStart URLs to work with standard security levels
- Use a URL mapping rule that accepts just the Assignment key and it directly calls pyMobileSnapStart with the other parameters defaulted.
Important: This encryption must be done inside the Pega Platform application.
String encryptedParams = pega_rules_utilities.pzEncryptURLActionString(tools,"Global", paramsToEncrypt);
String encryptedURL= "https://localhost:8443/prweb/PRAuth/OktaTest?"+encryptedParams;
The Encrypted URL would only have one parameter that looks like this:
That is encrypted value that can only be decrypted by the Pega Platform.
Instead of providing the third-party Assignment key only, you provide the pzuiActionzzzz parameter value.