Guide - 7.10.22.0 REST Requests with JWT

Product Version

7.10

Product To Version


Status

final

1 Introduction

SSO will be introduced step by step. This release contains the SSO for REST.

2 Migration

The migration for existing systems does not need to execute dbmigrate. But the implementation for the PWA or other REST clients must be adapted. The following features should be adapted or at least tested:

  • Login
  • Authentication for all requests
  • Logout

Old token handling can be replaced by JSON-Web-Token for local ICM registration. This feature will consolidate the authentication process and enhance the security of the token handling by using strong encryption methods to build and validate the signature of the authentication token.

2.1 Documents

3 Availability of SSO 

This page contains a collection of version numbers related to supported SSO features.

Feature/ApplicationAllKeycloakAzure AD B2BAzure AD B2CAuth0
SMC
7.10.18.07.10.21.07.10.23.07.10.23.0
Operations
7.10.19.07.10.21.07.10.23.07.10.23.0
Enterprise Backoffice
7.10.19.07.10.21.07.10.23.07.10.23.0
Channel Backoffice
7.10.19.07.10.21.07.10.23.07.10.23.0
REST (Backoffices)
7.10.22.07.10.22.07.10.23.07.10.23.0
REST (SF implicit B2C)7.10.23.0



REST (SF explicit B2C)(7.10.26.0)*



REST (SF B2B)(7.10.26.0)*



PWA



(soon)*
inSPIRED  (SF) login/logout7.10.24.0



inSPIRED  (SF) registration B2C(7.10.27.0)*



inSPIRED  (SF) registration B2B(7.10.27.0)*
(soon)







)* in development

3.1 Internal Features

ICM VersionContent
7.10.22.0ICM produces JWT token for own REST API

4 Next Items on Roadmap

ApplicationDescription
PWAImplement and Integrate SSO flows with Auth0 
ICMIntegrate SSO authentication into REST API for Storefront Applications

Disclaimer

The information provided in the Knowledge Base may not be applicable to all systems and situations. Intershop Communications will not be liable to any party for any direct or indirect damages resulting from the use of the Customer Support section of the Intershop Corporate Web site, including, without limitation, any lost profits, business interruption, loss of programs or other data on your information handling system.

Customer Support
Knowledge Base
Product Resources
Support Tickets