Show website in Universal gui and pass login credentials

Hello Blommetje,

What you are asking for is basically Single Sign On. This is possible and will in fact work automatically if set up Indicium as an OpenID provider and use OpenID / OAuth 2.0 as the authentication method for your other website, using Indicium as the authorization server. You can find some information on this here:

• 2023.2
• 2023.1 and below

Roughly speaking, the steps that you will have to take are the following:

1. Configure an OpenID Client / Client Application in IAM. This includes a client_secret that you can make up and a (login) redirect_url to your website. If you're on 2023.2, be sure to select Authorization code as the Grant type. You will also need to turn off Consent if you want this to work seamlessly.
2. Restart Indicium.
3. Configure your website to use the OpenID Connect / OAuth 2.0 Authorization code flow for authentication, using Indicium as the authorization server. I can't say much more on how to achieve this part, because it depends on the technology of your website. What I can say is that it will involve the following steps:
   1. Your website redirecting the user to Indicium's /connect/authorize endpoint.
   2. Receiving the Authorization code callback on the redirect_uri that was configured in IAM.
   3. Requesting an access token with this authorization code and, if successful, allowing access.

Once configured, the flow will work like this:

• The ‘viewer’ which is embedded in the Universal GUI will request your website.
• Your website will respond with a redirect to Indicium's /connect/authorize endpoint
• Indicium will detect that the user is already signed in because the browser will automatically include the cookie, because the cookie belongs to that Indicium on that domain.
• Indicium will redirect back to your website, including an authorization code.
• You validate the authorization code by requesting an access token with it.
• At this point you may consider the user signed in and you can return your page in the response, which will then be displayed in the viewer.

If your website is interactive, rather than just displaying a page to the user, then a few more steps might be required to make the authentication a bit more efficient. I can elaborate on this if needed.

I hope this helps.