Introduction
SSO will be introduced step by step. This release contains the SSO for REST.
Migration
The migration for existing systems does not need to execute dbmigrate. But the implementation for the PWA or other REST clients must be adapted. The following features should be adapted or at least tested:
- Login
- Authentication for all requests
- Logout
Old token handling can be replaced by JSON-Web-Token for local ICM registration. This feature will consolidate the authentication process and enhance the security of the token handling by using strong encryption methods to build and validate the signature of the authentication token.
Documents
Availability of SSO
This page contains a collection of version numbers related to supported SSO features.
| Feature/Application | Keycloak | Azure AD B2B | Azure AD B2C | Auth0 |
|---|---|---|---|---|
| SMC | 7.10.18.0 | 7.10.21.0 | 7.10.23.0 | 7.10.23.0 |
| Operations | 7.10.19.0 | 7.10.21.0 | 7.10.23.0 | 7.10.23.0 |
| Enterprise Backoffice | 7.10.19.0 | 7.10.21.0 | 7.10.23.0 | 7.10.23.0 |
| Channel Backoffice | 7.10.19.0 | 7.10.21.0 | 7.10.23.0 | 7.10.23.0 |
| REST (Backoffices) | 7.10.22.0 | 7.10.22.0 | 7.10.23.0 | 7.10.23.0 |
| PWA | (soon)* | |||
| uniqueness of email address |
)* in development
| Backoffice | REST SF | inSPIRED B2B | inSPIRED B2C | |
|---|---|---|---|---|
| Fully | 7.10.23.0 | 7.10.26.1-LTS | ||
| Registration | 7.10.26.1-LTS IS-30868 - REST Self Registration of SSO user and explicit B2B customer | 7.10.30.0 IS-32141 - Register B2C Customer | ||
| Login | 7.10.26.1-LTS IS-30868 - REST Self Registration of SSO user and explicit B2B customer | 7.10.28.1 IS-31474 - inTronics Business Login of SSO user and B2B customer | 7.10.24.2 IS-30734 - Login via inTronics B2C and SSO | |
| Logout | 7.10.24.2 IS-31250 - Changes in Authentication REST API Broke Backward Compatibility | 7.10.x IS-31475 - inTronics Business Logout of SSO user and B2B customer | 7.10.28.0 IS-31028 - Logout Options for SSO - inTRONICS | |
| Invite | 7.10.26.1-LTS IS-30109 - REST Invite other user of B2B buying organization | IS-32144 - Invite B2C customer for inTRONICS via backoffice |
Internal Features
| ICM Version | Content |
|---|---|
| 7.10.22.0 | ICM produces JWT token for own REST API |
Next Items on Roadmap
| Application | Description |
|---|---|
| PWA | Implement and Integrate SSO flows with Auth0 |
| ICM | Integrate SSO authentication into REST API for Storefront Applications |