Token Exchange, can it be used?

[mikara89]

Base on diagram I will like to acquire Access token for my client app.

I saw that one of supported grant type is "urn:ietf:params:oauth:grant-type:token-exchange".

Short explanation:

• Client App is registered in External Id Provider (Resource A)
• Qlik Saas Cloud is registered in External Id Provider (Resource B)
• Qlik Saas Cloud have OAuth client setup.
• As User login in Client App, App creates request for getting access token with scope for impersonating user on B (is it passible?)
• Then Client App requests Exchange token (RFC 8693 ) for access token of Qlik Saas Cloud through OAuth client.
• Then Client App can use access token of Qlik Saas Cloud  to connect to Enigma API.

Is this flow passible? 

[jprdonnelly]

@mikara89 - This is using a different toolkit, though I think the flow is what you are looking for.