Question About Access Token Retrieval via SSO

[Tsai Hsuan Hsieh]

Dear Yamcs Team,

We're implementing SSO and would like to confirm:
Is it possible to obtain a Yamcs access token without first accessing Yamcs directly?

We're currently using fetchAccessTokenWithAuthorizationCode (in auth.service.ts), but we're unsure if we're missing something.

Any clarification would be greatly appreciated.

Best regards,
Stasy

[fabia...@spaceapplications.com]

SSO is a loaded term. If your goal is to have Yamcs as one of the services among others, with login on an external SSO product, OpenID would be what I recommend: https://docs.yamcs.org/yamcs-server-manual/security/authmodules/openid/ (we use it with Keycloak, but it should work with other OpenID-compatible Identity Providers too).

At this point I don't see what would require you to make changes to web sources.