SSO will be introduced step by step. This release contains the SSO for REST.
The migration for existing systems does not need to execute dbmigrate. But the implementation for the PWA or other REST clients must be adapted. The following features should be adapted or at least tested:
Old token handling can be replaced by JSON-Web-Token for local ICM registration. This feature will consolidate the authentication process and enhance the security of the token handling by using strong encryption methods to build and validate the signature of the authentication token.
This page contains a collection of version numbers related to supported SSO features.
Feature/Application | Keycloak | Azure AD B2B | Azure AD B2C | Auth0 |
---|---|---|---|---|
SMC | 7.10.18.0 | 7.10.21.0 | 7.10.23.0 | 7.10.23.0 |
Operations | 7.10.19.0 | 7.10.21.0 | 7.10.23.0 | 7.10.23.0 |
Enterprise Backoffice | 7.10.19.0 | 7.10.21.0 | 7.10.23.0 | 7.10.23.0 |
Channel Backoffice | 7.10.19.0 | 7.10.21.0 | 7.10.23.0 | 7.10.23.0 |
REST (Backoffices) | 7.10.22.0 | 7.10.22.0 | 7.10.23.0 | 7.10.23.0 |
PWA | (soon)* | |||
uniqueness of email address |
)* in development
Backoffice | REST SF | inSPIRED B2B | inSPIRED B2C | |
---|---|---|---|---|
Fully | 7.10.23.0 | 7.10.26.1-LTS | ||
Registration | 7.10.26.1-LTS IS-30868 - REST Self Registration of SSO user and explicit B2B customer | 7.10.30.0 IS-32141 - Register B2C Customer | ||
Login | 7.10.26.1-LTS IS-30868 - REST Self Registration of SSO user and explicit B2B customer | 7.10.28.1 IS-31474 - inTronics Business Login of SSO user and B2B customer | 7.10.24.2 IS-30734 - Login via inTronics B2C and SSO | |
Logout | 7.10.24.2 IS-31250 - Changes in Authentication REST API Broke Backward Compatibility | 7.10.x IS-31475 - inTronics Business Logout of SSO user and B2B customer | 7.10.28.0 IS-31028 - Logout Options for SSO - inTRONICS | |
Invite | 7.10.26.1-LTS IS-30109 - REST Invite other user of B2B buying organization | IS-32144 - Invite B2C customer for inTRONICS via backoffice |
ICM Version | Content |
---|---|
7.10.22.0 | ICM produces JWT token for own REST API |
Application | Description |
---|---|
PWA | Implement and Integrate SSO flows with Auth0 |
ICM | Integrate SSO authentication into REST API for Storefront Applications |
The information provided in the Knowledge Base may not be applicable to all systems and situations. Intershop Communications will not be liable to any party for any direct or indirect damages resulting from the use of the Customer Support section of the Intershop Corporate Web site, including, without limitation, any lost profits, business interruption, loss of programs or other data on your information handling system.