Geodi User Token API - SSO for trusted clients

Allows the application to redirect its user to a GEODI interface without requiring a login screen.

 Links obtained via this service do not requiere a login page. The user specified by the trusted application is considered to be logged in to the system.

Only applications defined underSettings/ClientToken can make use of this service. Application is validated by making a request to ValidateURL in the definion.

If a .net soap api that takes same parameters and returns same object as an output is implemented, then [ScriptMethod(ResponseFormat = ResponseFormat.Json)] attribute should be added to the method.

[GEODIURL]/TokenHandler?op=GetAutoLoginLink&ClientID=[ClientID]&ClientValidator=[ClientValidator]&LoginUser=[LoginUser]&UserSession=[Token]

• ClientID: This is the client ID defined under Settings/ClientToken. Desired complexity can be defined.
• ClientValidator: Çağrı yapan uygulama tarafından tanımlanacak anahtardır. Kriptolu ve içeriğinde zaman bilgisi de barındıran bir veri olması önerilir.  Settings/ClientToken üzerinde yapılan ValidateURL adresinden doğrulaması ve "OK" sonucu dönülmesi beklenir.
• LoginUser: It is the user information that is logged in in the requesting application.
  
  • For the LDAP user: only the user name, LDAP:Domain\UserName or LDAP:UserName can be passed.  If the domain is not passed, GEODI uses the registered LDAP domain address of the user of its application.
  • For Geodi User, GEODI:UserName must be passed.
• UserSession: It is the Token information. Can be obtained using the information give at Generating a Geodi Token page. Should have access to GetAutoLoginLink service.
• IPFilter(Optional) :  It is the IP filter where the obtained link will work.
• TimeOutMinute(Optional) : It is used to indicate how long it is possible to log into GEODI with the link obtained. The default value is 120 minutes.

Aşağıdaki gibi bir tanım UTF8 encoding jSettings uzantılı bir dosyaya kaydedilmeli ve GEODI uygulamasının göreceği Settings/ClientToken klasörüne atılmalıdır.

{

ClientID:"MyClientID",
ValidateURL: "http(s)://yourhost/....?validator={ClientValidator}",
GEODIRequestHeader:"GEODI_Request"

}

ValidateURL içeriğinde {ClientValidator} kullanılsa dahi request headerlar arasında ClientValidator iletilir.

Bir GEODIRequestHeader tanımı yapılmışsa ValidateURL çağrısına bu bilgide header olarak eklenir. Çağrıyı yapan uygulamanın GEODI olduğunu doğrulamakta kullanılabilir.

401 Unauthorized access / Access denied

403 Forbidden

511 Network Authentication Required

452 ClientValidator could not be verified

453 LoginUser required

454 Invalid Client Id or empty ValidateUrl

455 LDAP domain not found  (This error can only be received when trying to find the LDAP domain when username is passed as LDAP: username)

500 -Yakalanmamış diğer hatalar, Web Request hataları-

• .Net 3.5 ClientToken WebHandler ( C# )

Same with GetAutoLoginLink . Returns only Token, not URL+Token.