SSO - Technical integration - OAuth2.0

Introduction

The Career Center is your school's career platform. It is a website where students can find information about companies, find an internship and job offers. These users can access the Career Center by logging in through your authentication system.

OAuth 2.0 SSO Integration

Description 

OAuth 2.0 is a Single Sign-On solution. Single Sign-On (SSO) integration enables a better user experience when using a multitude of web services. With an SSO solution, different Web services can authenticate to a single authorized trusted source, which the user must connect to, instead of requiring the end user to connect to each separate service.

     +--------+                            +---------------+
     |        |--- Authorization Request ->|   Resource    |
     |        |                            |     Owner     |
     |        |<--- Authorization Grant ---|               |
     |        |                            +---------------+
     |        |
     |        |                            +---------------+
     |        |---- Authorization Grant -->| Authorization |
     | Client |                            |     Server    |
     |        |<------ Access Token -------|               |
     |        |                            +---------------+
     |        |
     |        |                            +---------------+
     |        |------- Access Token ------>|    Resource   |
     |        |                            |     Server    |
     |        |<---- Protected Resource ---|               |
     +--------+                            +---------------+

Configuration of your platform

The login and forwarding URLs are built with the permalink of your Career Center. They will be sent to you at the time of registration.

If your school's permalink is 'school-permalink', you will need to set :

• redirect_uri : school-permalink.jobteaser.com/users/auth/school_permalink_oauth2/callback

JobTeaser Configuration

Authentication Elements

Here is the information we will need:

• Client ID
• The client's secret
• The url of the authorization server
• The url of the token
• The url of the resource server

User Attributes

The user attributes that must be integrated into JobTeaser are :

• UID
• name
• first name
• email