Workflow
The Single Sign On process is initiated from the Maestrano website when a user clicks on your application tile. This redirects the user to the configured SSO initialization endpoint which then redirects back to Maestrano IDM endpoint. The user is then redirected to your SSO consume endpoint with all the User details required to either log the user in or create a new account.
Considerations
As the user email is unique on Maestrano, it is safe to match users by email or user_id. The user_id must be stored against the User record so even if a user changes its email, you can still uniquely identify its account.
The group_id specified in the SSO request is an identifier that will be used to assign the Users against the Company/Organization they belong to as well as the identifier used for the Connec! data-sharing. You need to store this value against the user company inside your application.
On Maestrano.com,
SSO Consume process
