make a REST API for auto-enrollment
Summary
make a REST API for auto-enrollment
Design proposition
-
a websso administrator generates a token for the application in the manager. Then he sends the token to the application by any secure mean.
-
the application provides the token and the user mail (GET or POST ?) on a REST URL
-
SSO sends back the list of mandatory and optional attributes the application can write
-
the application provides the attribute values
-
SSO writes the user in the database
Note: maybe the SCIM protocol can be useful here...