Hello everyone,
From reading Auth best practices for embedding | Qlik Developer Portal, it is my understanding that the recommended way to achieve silent authentication when embedding Qlik Content into a web-app/SPA is to conform the source and target applications to use the same identity provider.
Now, for whatever reason, say it isn't viable to conform the IdP of the Qlik Tenant to match the one of the web-app. What is the recommended way to perform silent authentication in this scenario?
I've noticed that both the web-app and SPA OAuth2 client application examples on qlik.dev have a step that's a redirect to /login, which I'd like to avoid.
From what I know, an alternative would be the use of JWTs, but I worry about the 3rd party coookie issue.
Any insights or pointers in the right direction would be greatly appreciated. Thank you for your assistance.
