how can i retrive CROWD sso token by username

hello everybody,

Is there any function REST to retrive CROWD sso token by username.

i use REST API to creat the SSO token: POST /session

<?xml version="1.0" encoding="UTF-8"?>
<authentication-context>
  <username>my_username</username>
  <password>my_password</password>
  <validation-factors>
    <validation-factor>
      <name>remote_address</name>
      <value>127.0.0.1</value>
    </validation-factor>
  </validation-factors>
</authentication-context>

i want to authenticate a user in one application by validadting his login/password and creat the sso token -> after that in the other application i want to chek if the user is logged in by retriving the sso token

2 answers

1 accepted

1 vote
Accepted answer

i want to authenticate a user in one application by validadting his login/password and creat the sso token -> after that in the other application i want to chek if the user is logged in by retriving the sso token

We don't support your intended method of operation directly. The way we expect third party applications to use Crowd is to use the session resource; you can POST to it to authenticate a user in the first application, which will get you a session token. Your application should set that session token as a cookie for the user.

Then, in the second application, your user will send over the token key in the cookie to it, and the second application should use the session/{token} resource to get the session associated with the token, which will contain the username of the user who created the session. Alternatively, the 2nd application could POST to the session resource again to again authenticate the user and create another session; it will get back the same token if the provided validation factors are the same.

(I'm a Crowd developer.)

Hi Caspar Krieger,

My confluence use User Directory of Crowd, so Can i get Token when login into Confluence ? 

Thanks!

i found the answer so for any one who try ti athenticate to apps using Crowd. the easiest way is to retrive SSO toke from this cookie "crowd.token_key" of your domain / . after that check the session is open or not.

Correct, however note that crowd.token_key can be configured to be named differently.

Suggest an answer

Log in or Sign up to answer
Community showcase
Published Wednesday in Jira Service Desk

What's new in Jira Service Desk Server: Introducing 4.0 & more - Feb 2019

Hello Atlassian Community!  I'm Teresa, the Product Marketing Manager   for Jira Service Desk Server at Atlassian. I'm excited to announce two exciting releases for Jira Service De...

40 views 0 0
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you