Simplified Portal Navigation with Secure SSO Redirect

Simplified Portal Navigation with Secure SSO Redirect

SSO Redirect feature, enabling seamless user transitions from a company’s website to WeGuard without requiring repeated login credentials. It simplifies transitions between portals with a single click by eliminating repeated credential entries providing an efficient, hassle-free experience for users.This functionality leverages API keys to provide secure, efficient access, enhancing user convenience and security by eliminating manual logins.

Process for enabling SSO through the WeGuard Enterprise Portal

  1. Login to the WeGuard Console and click on Settings

  1. Click on the API Key, select the Generate API Key

  1. Upon activation, the API Key and Secret Key will appear on the screen.

  1. Use the following buttons for key management:
    1. Refresh API Key: Generates a new API key if needed.
    2. Revoke API Key: Disables the key to prevent misuse if compromised.
    3. The Timeline option on the dashboard provides a detailed history of API calls made with the generated API key. This includes: Device ID, API Path, Client IP, Requested Timestamp, Request Method, Request Payload, Response Payload

Notes
Admins can filter this data by date range and download it for analysis or record-keeping.

Configuring SSO

Below is the example to get the redirectUrl to WeGuard console:
Quote
curl --location '<weguard_server_base_url>/v1/sso/links' \
--header 'WeGuard-API-Key: bfbecc18a4684497b83ad72cb962e1fd' \
--header 'Content-Type: application/json' \
--data-raw '{
    "redirect": true,
    "expiryRedirectURL": "<your_website_url>",
    "username": "<userName/Email>"
}'
Sample Response:
{
"headers": {},
"body": {
"ssoLink": "https://weguard.ai/#/login?sso=fr4353893kdffkk"
},
"statusCodeValue": 200,
"statusCode": "OK"
}

  1. Utilize the provided API (POST), ensuring that the API key is included in the headers. The API key can be obtained from the WeGuard console. In the request payload, include the parameters expiryRedirectUrl and userName. This request will generate an ssoLink, which contains a token appended to the URL. Note that this token is valid for 10 minutes.
  2. Use the generated ssoLink to redirect users to Dashboard page without logging into WeGuard  Console.



We hope this article was useful. Thank you for reading.

For more WeGuard insights, please explore the  Visual Knowledge-base Series

For more details, please visit  https://www.weguard.com

If you need any help on this, do call up WeGuard Support at +1(737) 931-1410 Ext. 102 or  contact  WeGuard Support Email  or Initiate  Chat