Global Security Forum

Security Global Forum

Our mission is to provide clients with an online user community of industry peers and IBM experts, to exchange tips and tricks, best practices, and product knowledge. We hope the information you find here helps you maximize the value of your IBM Security solutions.

 View Only

  • 1.  Is there any option to apply SSO on mobile application

    Posted Mon September 07, 2020 11:21 AM
    HI

    I would like to understand, if there is any mobile application where we can apply SSO using the web application configuration? Please let me know the name and configuration document if any.

    Thanks

    ------------------------------
    Anant Aggarwal
    ------------------------------


  • 2.  RE: Is there any option to apply SSO on mobile application

    Posted Tue September 08, 2020 03:33 AM
    Hi Anant,

    I don't understand what you're looking for here.

    Many SaaS applications (Salesforce, Office365, etc.) provide a native mobile application in addition to their web interface and most of these use web-based SAML flows for Single Sign-On.  When you are asked to login to your account in these native applications, it's often a web view in the application so it will redirect out to an IdP if that is specified for the domain you're attempting to access (based on e-mail address domain).

    Is this what you're looking for or did I misunderstand the question.

    If you want to clarify, I would suggest re-posting to the IAM-specific community instead of this global community.  https://ibm.biz/iamcommunity.

    Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message


  • 3.  RE: Is there any option to apply SSO on mobile application

    Posted Tue September 08, 2020 07:26 AM
    Hi Anant,

    you can use all authenticators with REST instead of Forms based auth as well, if is it what you were looking for. As Jon mentioned for the backend you'd use SAML or even better OIDC as SAML for different reasons won't work well with mobile Apps. If your app is locally without any backend (which would be unusual) you could also consume the OIDC token using a IDP.

    Jens

    ------------------------------
    Jens Petersen
    ------------------------------

    Original Message


  • 4.  RE: Is there any option to apply SSO on mobile application

    Posted Tue September 08, 2020 07:39 AM
      |   view attached
    Hi all

    I think the language is quite confusing 
    I want to know about the IBM security verify access mobile app as alternate of appliance if available, where whatever the SAML configuration i have applied in appliance is applicable to its mobile app too.IS it possible?
    I have a document attached here but unable to link it my current SAML configuration

    ------------------------------
    Anant Aggarwal
    ------------------------------

    Original Message


  • 5.  RE: Is there any option to apply SSO on mobile application

    Posted Tue September 08, 2020 07:55 AM

    Hello Anant,

    the ISAM for Mobile was merged to the ISAM Appliance quite a while ago. The Features described in the doc are available with ISAM 9.x or Verify Access 10, which is basically the new name of ISAM. It's a bit confusing. While the use case can be 1 by 1 implemented with verify access, the click trough would be different - at least the menus changed some. ISAM for Mobil has never been a app. The verify app itself is more like "a client" for authentication using the verify access appliance or the SaaS.

    -Jens

    ------------------------------
    Jens Petersen
    ------------------------------

    Original Message