Skip to content

[okta-1189243] Native to web SSO GA updates #6222

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
thomascavanagh-okta wants to merge 1 commit into
base: master
Choose a base branch
from
+1 −3
Open

[okta-1189243] Native to web SSO GA updates #6222

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 1 addition & 3 deletions packages/@okta/vuepress-site/docs/guides/native-to-web-sso/main/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,6 @@ excerpt: Learn what Native to Web SSO is and how to use it
layout: Guides
---

<ApiLifecycle access="ea" />

Learn what Native to Web SSO is, why it matters, and how it actually connects your OpenID Connect (OIDC) apps to your web-based services.

---
Expand Down Expand Up @@ -119,7 +117,7 @@ To enable the Token Exchange grant type in your app, follow these steps:

## Configure the trust map

Define a list of apps that are allowed to request the single-use interclient token on the target web app. This allowlist is a trust map between the origin app and the target web app. It ensures that the SSO flow only happens between apps that you explicitly trust. You can define up to five trusted apps per target web app.
Define a list of apps that are allowed to request the single-use interclient token on the target web app. This allowlist is a trust map between the origin app and the target web app. It ensures that the SSO flow only happens between apps that you explicitly trust. You can define up to 50 trusted apps per target web app.

Okta checks this trusted relationship at two critical points in the flow:

Expand Down