You are viewing limited content. For full access, please sign in.

Discussion

Discussion

SSO for API usage

Laserfiche API Laserfiche Cloud
Updated June 12
posted on June 12

I was wondering if there is any way to authenticate into the Laserfiche API for cloud using a 3rd party SSO IdP, in this case Entra will be used.  The use case is a clients vendor is wanting to build a custom integration into their application, they are currently authenticating into this other application using SSO and are wondering if they can somehow use that single signon they're already doing to then make subsequent calls to the Laserfiche API using that signed in users credentials instead of using a generic serviced principal user.  Any advice or information would be appreciated, thanks!

0 0
replied on June 12

You can absolutely use SSO for API usage by leveraging Laserfiche’s user authentication OAuth flows. Instead of using a generic service principal, this allows the API to make calls using the specific signed-in user's credentials.

Here is how you can set it up:

  1. Configure the IdP: Ensure that Microsoft Entra ID is already configured as the Identity Provider (IdP) within your Laserfiche Cloud account.

  2. Register the App: Head over to the Laserfiche Developer Console and create a new app using one of the two user-authentication methods:

  3. The User Flow: When the third-party application initiates the OAuth flow, the user will be prompted to log in via the Laserfiche login screen (which will redirect them to your configured Entra ID SSO). Once authenticated, the API will inherit and use that specific user's permissions for all subsequent calls.

 

Hope that helps!

Andrew

1 0
You are not allowed to follow up in this post.

Sign in to reply to this post.

Details
Related Posts
Loading ...