Skip to Content
avatar image
Former Member

Does oauth2 in SCP support SAML Bearer Assertion as an authorization grant

Hi expert,

We develop a restful service on SCP, we are wondering whether we can access the token using SAML 2.0 Bearer Assertion? It looks like in oauth2 settings, this kind of grant type is not supported. But in oauth2 standard, SAML 2.0 Bearer Assertion is one extension grant type [1].

[1] https://tools.ietf.org/id/draft-ietf-oauth-saml2-bearer-09.html

BRs,

yangyang

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • Jun 13, 2017 at 12:09 PM

    Hello Yangyang,

    Yes, id does:

    SAML Bearer Assertion Authentication

    Best regards

    Frank

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Frank,

      Thanks for answering.

      I'm afraid our case is a bit different. We would like to call a restful API on SCP from an App outside SCP. The solution you provided is calling a restful API outside SCP from an App on SCP. SCP Cloud Connector can solve it, but I think such kind of configurations are not feasible in our case. Coz in our case the oauth2 endpoint on SCP needs to handle the SAML assertion...What do you think? Is my understanding correct?

      BRs,

      yangyang