Topic: Single Sign On best practice
Hi All,
Just wanted to get some insight into how some of you all may integrate Wialon hosting into your applications with SSO with an iframe utilizing: https://hosting.wialon.com/
One of our thoughts was to to have the user sign in using the simple login form:
http://{host}/login_simple.html
found here: https://sdk.wialon.com/wiki/en/sidebar/ … ogin/login
*Just the first time while using duration = 0.
We could then take that token and OperateAs that user to get the SID:
svc=token/login¶ms={"token":"<access_token>","operateAs":"<optional_sub_user>"}
Then while the user is logged into our interface, we can append that SID to the host URL, e.g. https://hosting.wialon.com/?sid=xxxxxx and load that URL straight into the iframe.
Has anyone done something similar to this before? If so, did you find any caveats with token or session expirations or anything?