Token Exchange, can it be used?

mikara89 — Sat, 25 Nov 2023 20:41:40 GMT

Base on diagram I will like to acquire Access token for my client app.

I saw that one of supported grant type is "urn:ietf:params:oauth:grant-type:token-exchange".

Short explanation:

Client App is registered in External Id Provider (Resource A)
Qlik Saas Cloud is registered in External Id Provider (Resource B)
Qlik Saas Cloud have OAuth client setup.
As User login in Client App, App creates request for getting access token with scope for impersonating user on B (is it passible?)
Then Client App requests Exchange token (RFC 8693 ) for access token of Qlik Saas Cloud through OAuth client.
Then Client App can use access token of Qlik Saas Cloud to connect to Enigma API.

Is this flow passible?

Re: Token Exchange, can it be used?

jprdonnelly — Fri, 08 Dec 2023 15:29:50 GMT

@mikara89 - This is using a different toolkit, though I think the flow is what you are looking for.