Single Sign-On—Fetch Access Token API not working

[gauravmarch]

Dear Experts,

I am trying to fetch the access token using Finesse SSO Rest API, but its not working.

My steps/usecase is following:

- If I invoke the url: https://<MY_FQDN>/desktop/sso/test (https://developer.cisco.com/docs/finesse/#!single-sign-on-test-api), it redirects me correctly to SSO login screen, where post login it shows me succesful message with following content:

SSO Authentication is successful.
Authenticated user-id is sso_agent
Authenticated user-realm is {my_realm}
Authenticated user-principal is {my_principal}
Access token expiry 3,600
Refresh token expiry 36,000

 After this when I invoke token request (within same session) to url  https://<MY_FQDN>/desktop/sso/token (https://developer.cisco.com/docs/finesse/#!single-sign-on-fetch-api/single-signonfetch-access-token-api)

it gives me following error:

errorType	"Request Forbidden"
errorData	""
errorMessage	"Request could not be processed since SSO is disabled or session is invalid."

Could someone please help me out in figuring out what I am doing wrong here?

Please note SSO is enabled on finesse for this agent.

[dekwan · Accepted solution]

Hi,

The Single Sign on Test API is just a Test and isn't actually useful for getting the token. If I am understanding from the other posts, you are building a server side application. If that is the case, you should be using the IdS SDK.

Thanx,

Denise

[Marek (gaman-gt.com)]

If you are using Finesse SSO API you need to have agent session active in the Finesse (pass all login credentials using out of the box login form). Once tha agent is logged into Finesse, SSO Fetch Token API becomes available.

Please look at the attached recording. it reproduces the issue that you have encountered. It was tested on Cisco dCloud with SSO enabled as: Hybrid Mode and SSO mode.