search

CZ-NIC / pyoidc

A complete OpenID Connect implementation in Python
Other
710 stars 258 forks source link

Shared Authentification between two OP #764

Open CroustiBreton opened 3 years ago

CroustiBreton commented 3 years ago

Hello, I am contacting you for a lack of understanding about OIDC. I understand this is not the ideal location as it is not a bug, but I need help with a feature that seems basic for OIDC.

I am trying to set up a link between two OP servers (with pyoidc). Each of them hosts an RP as well as a secured service, but I would like to set up the fact that a user can authenticate on one and obtain access on the second (like all the examples with Google and other services).

Is it possible ? Is there a documentation detailing how to set this up ? From what I read, it seams to be related with the Access Token ?

Thanks for any help, Quentin

scottdear commented 3 years ago

You can make one the relying party of the other and vice versa, e.g. each OP is also a Relying Party of the other.

You could also do some kind of OWASP session implementation between the two.

Then each would just be a separate OP that provides authentication to configured RP's