Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
  • CipherTrust Manager
  • CipherTrust Application Data Protection (CADP)
  • CipherTrust Application Key Management (CAKM)
  • CipherTrust Batch Data Transformation (BDT)
  • CipherTrust Cloud Key Management (CCKM)
  • CipherTrust Data Discovery and Classification (DDC)
  • CipherTrust Data Protection Gateway (DPG)
  • CipherTrust Database Protection (CDP)
  • CipherTrust Intelligent Protection (CIP)
  • CipherTrust Integrations
  • CipherTrust Migrations
  • CipherTrust RESTful Data Protection (CRDP)
  • CipherTrust Transparent Encryption (CTE)
  • CipherTrust Transparent Encryption Userspace (CTE-U)
  • CipherTrust Secrets Management (CSM)
  • CipherTrust Vaulted Tokenization (CT-V)
  • CipherTrust Vaultless Tokenization (CT-VL)
  • CTE-Linux
  • CTE-Windows
  • CTE-AIX
  • CTE-K8s
  • CTE-U
  • Crypto Command Center
  • Data Protection on Demand
  • Luna Cloud HSM
  • Luna Network HSM
  • Luna PCIe HSM
  • Luna USB HSM
  • OneWelcome Identity Platform
  • ProtectApp LUKS
  • ProtectServer 2 HSM
  • ProtectServer 3 HSM
  • SafeNet Trusted Access (STA)
  • SafeNet MobilePASS+
  • SafeNet MobilePASS+ for Android
  • SafeNet MobilePASS+ for Chrome
  • SafeNet MobilePASS+ for macOS
  • SafeNet MobilePASS+ for iOS
  • SafeNet MobilePASS+ for WatchOS
  • SafeNet MobilePASS+ for Windows
  • SafeNet Synchronization Agent
  • SafeNet Logging Agent
  • SafeNet Agent for FreeRADIUS
  • SafeNet Agent for NPS
  • SafeNet Agent for Windows Logon
  • SafeNet Authentication Service Private Cloud Edition (SAS PCE)
  • SafeNet Remote Logging Agent
  • SafeNet Keycloak Agent
  • SafeNet IDPrime Virtual (IDPV)
  • SafeNet FIDO Key Manager
  • SafeNet FIDO Key Manager for Android
  • SafeNet FIDO Key Manager for iOS
  • SafeNet FIDO Key Manager for Windows
back

Android SDK 12.1.1

App to web single sign-on

search
printsuggest an edit

App to web single sign-on

copy link to clipboardIntroduction

App to Web Single Sign-On allows you to take a session from your mobile application and extend it to a browser on the same device. This is useful for giving a seamless experience to your users when they transition from the mobile application to the website where more functionality likely exists. This functionality can only be used when using the OneWelcome CIM or OneWelcome Tulip identity providers. This can be configured in the OneWelcome Mobile Identity & Access admin.

The SDK allow you to specify a target URI where authentication is required. This URI must be configured in the Action Token configuration of the OneWelcome Consumer Identity Manager. It will then verify that your mobile application's session is valid and establish a session with the IDP before redirecting the user to the target URI with them automatically logged in.

To use the functionality, call the UserClient#getAppToWebSingleSignOn with the target URI and OneginiSingleSignOnHandler to get the result. In case of a success, the OneginiAppToWebSingleSignOn data object will be returned:

public interface OneginiAppToWebSingleSignOn {

  _**
   * This is a URL that is meant to be used by the browser to establish a session.
   *
   * @return Uri meant to be used by the browser
   *_
  Uri getRedirectUrl();

  _**
   * The token param from the {@link #getRedirectUrl()} provided here as a convenience.
   *
   * @return String token
   *_
  String getToken();
}

In order to continue, the redirect URI should be opened in a web browser. In case of failure, a OneginiSingleSignOnError will be returned. To read more about errors and how to handle them please read the Error handling chapter.

copy link to clipboardExample code

public void startSingleSignOn() {

    final Uri targetUri = Uri.parse("https:__demo-cim.onegini.com_personal_dashboard");

    final OneginiClient oneginiClient = OneginiSDK.getOneginiClient(this);
    oneginiClient.getUserClient().getAppToWebSingleSignOn(targetUri, new OneginiSingleSignOnHandler() {
      @Override
      public void onSuccess(final OneginiAppToWebSingleSignOn oneginiAppToWebSingleSignOn) {
        final Intent intent = new Intent(Intent.ACTION_VIEW, oneginiAppToWebSingleSignOn.getRedirectUrl());
        intent.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
        intent.addFlags(Intent.FLAG_ACTIVITY_NO_HISTORY);
        startActivity(intent);
      }

      @Override
      public void onError(final OneginiSingleSignOnError oneginiSingleSignOnError) {
        @OneginiSingleSignOnError.SingleSignOnErrorType int errorType = oneginiSingleSignOnError.getErrorType();
        if (errorType == OneginiDeregistrationError.DEVICE_DEREGISTERED) {
          __ Single Sign-On failed due to missing device credentials. Register app once again.
          new DeregistrationUtil(DashboardActivity.this).onDeviceDeregistered();
        }

        __ other errors don't really require our reaction, but you might consider displaying some message to the user
        showToast("Single Sign-On error: " + oneginiSingleSignOnError.getMessage());
      }
    });
  }

On this page