Single Sign On Fetch Access Token

[AhmedHasan]

i am unable to call the https://<fqdn>:8445/desktop/sso/token?cc_username=<agentid>&return_refresh_token=true api with my sso agent id having Error: 

{"errorType":"Request Forbidden","errorData":"","errorMessage":"Request could not be processed since SSO is disabled or session is invalid."}

 where as I am able to login to finesse with my sso agent and also able to call https://<FQDN>/desktop/sso/test and authenticate agent with ASDF.

I really want to log in to finesse using sso agent programmatically using a rest apis. 

currently using finesse 12.0 version.

[PVYAPA]

Hi Ahmed , I am facing similar issue, did you figure this out ?

[PVYAPA]

I was able to resolve this, posting the resolution below so that it helps some one encountering same issue.

Below only works from finesse version 11.6 and above.

https://<fqdn>:8445/desktop/sso/token?cc_username=<agentid>&return_refresh_token=true

2) Also make sure the agent ID/username passed in CC_username is SSO enabled in agent explorer

3)This API cannot be called from postman and needs either a browser or a cookie

If the agent is already signed in it returns the token and if not it redirects to your IDP and brings up the IDP page