Android Application Question

[Marc Boorshtein]

>
>
>
> https://developer.pingidentity.com/en/resources/napps-native-app-sso.html
>
> Does not apply to QT5 applications, but might be useful in other settings.
>
>
>
Issue I see with this is while it works, seems to break the way openid
connect is supposed to work.  you're not supposed to move the tokens
between agents (in this case the browser and the app).  Should be
generating a new token once authenticated that is then transfered via
OAuth2 (we had this same discussion over on kubernetes a few weeks back).

But I think the moral of the story is, if you design your app+backend
services correctly saml vs openid connect shouldn't matter.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170104/bfb83356/attachment.html>