The scenario is:
As an App deployed on YaaS platform, the user logs into App via SSO (SCI: accounts.sap.com), perform some operations, trigger an API call to one service endpoint deployed on SCP.
To propagate user authentication, we want to obtain the access token using saml bear assertion, which is one grant type specified in Oauth2 spec. (https://tools.ietf.org/html/draft-ietf-oauth-saml2-bearer-08)
The questions is how to generate saml bear assertion for obtaining access token? Looks like SCI does not provide this kind of endpoint? Or does this step need to be done locally?
Thanks for answering.
BRs,
yangyang
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.