# How to authenticate and launch one application from another application for okta authenticated user **URL:** \ **Category:** Get Help\ **Tags:** application, sso\ **Created:** [January 3, 2024, 9:38am UTC](https://community.auth0.com/t/how-to-authenticate-and-launch-one-application-from-another-application-for-okta-authenticated-user/124035 "2024-01-03T09:38:01Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![sdevmore](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/sdevmore/32/49863_2.png) [@sdevmore](https://community.auth0.com/u/sdevmore)\ **Post date:** [January 3, 2024, 9:38am UTC](https://community.auth0.com/t/how-to-authenticate-and-launch-one-application-from-another-application-for-okta-authenticated-user/124035/1 "2024-01-03T09:38:01Z")
I have app1, app2, app3 in same tenant all are SPA I logged into app1 and need to launch app2 and app3 without giving password and username again, Kind of SSO to the application with same Okta user. ---
**Author:** ![marcelina.barycka](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/marcelina.barycka/32/56162_2.png) [@marcelina.barycka](https://community.auth0.com/u/marcelina.barycka)\ **Post date:** [January 3, 2024, 10:22am UTC](https://community.auth0.com/t/how-to-authenticate-and-launch-one-application-from-another-application-for-okta-authenticated-user/124035/2 "2024-01-03T10:22:06Z")
Hi @sdevmore , welcome to Auth0! > [@sdevmore](#): > > Kind of SSO to the application with same Okta user. Does the user in context belong to a single connection that is enabled for all three SPAs apps registered in Auth0? This way the login context would be shared between apps. One thing to keep in mind is that by default, Auth0 will display a user consent prompt (APIs associated with SPAs asking for permissions to interact with Auth0 user profile) during the first login to each app. (This can be skipped by enabling “`Skip user consent`” Under APIs Setting section.) Please let us know if that work for you! ---
**Author:** ![sdevmore](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/sdevmore/32/49863_2.png) [@sdevmore](https://community.auth0.com/u/sdevmore)\ **Post date:** [January 3, 2024, 11:14am UTC](https://community.auth0.com/t/how-to-authenticate-and-launch-one-application-from-another-application-for-okta-authenticated-user/124035/3 "2024-01-03T11:14:53Z")
Yes it uses same connection. Didnt get that fully!, Let me put in my problem again in brief I had created 2 Single page applications(different clientId) which belongs to a single tenant. The angular applications which are deployed uses `auth0-lock` package inorder to authenticate then our application does resumeAuth is hash provided after authentication in the URL. Now, our scenario is when i login into application 1 using a (emailId and password) or using (SSO for federated domain), how can we skip the login process of second application when trying to navigate to second application from first application ( basically SSO into another application ) ---
**Author:** ![shan2510](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/shan2510/32/53640_2.png) [@shan2510](https://community.auth0.com/u/shan2510)\ **Post date:** [January 3, 2024, 11:51am UTC](https://community.auth0.com/t/how-to-authenticate-and-launch-one-application-from-another-application-for-okta-authenticated-user/124035/5 "2024-01-03T11:51:52Z")
Yes, want the implementation for the same facing issues during SSO Into other application. ---
**Author:** ![marcelina.barycka](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/marcelina.barycka/32/56162_2.png) [@marcelina.barycka](https://community.auth0.com/u/marcelina.barycka)\ **Post date:** [January 3, 2024, 1:37pm UTC](https://community.auth0.com/t/how-to-authenticate-and-launch-one-application-from-another-application-for-okta-authenticated-user/124035/6 "2024-01-03T13:37:24Z")
Hi @sdevmore , @shan2510 ! > [@sdevmore](#): > > I had created 2 Single page applications(different clientId) which belongs to a single tenant. The angular applications which are deployed uses `auth0-lock` package inorder to authenticate then our application does resumeAuth is hash provided after authentication in the URL. Thanks for sharing your settings! When using `auth0-lock` package (embedded login) , there are [two conditions](https://auth0.com/docs/libraries/lock#error-codes-and-descriptions) that need to be met to guarantee SSO in Auth0: - applications and the Auth0 tenant must be under the same domain (custom domain feature), - all apps have to be first party (meaning they have to be registered under the Auth0 tenant) - this condition you’ve already met. Can I assist you in any follow up questions? Also please let us know results! ---
**Author:** ![shan2510](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/shan2510/32/53640_2.png) [@shan2510](https://community.auth0.com/u/shan2510)\ **Post date:** [January 3, 2024, 2:21pm UTC](https://community.auth0.com/t/how-to-authenticate-and-launch-one-application-from-another-application-for-okta-authenticated-user/124035/7 "2024-01-03T14:21:43Z")
Hi @marcelina.barycka , Thanks for your quick reply and the intend in helping me out with the solution. Let me brief some more functionalities in the application. First of all as per my understanding for the point no 1 mentioned above 1.`applications and the Auth0 tenant must be under the same domain (custom domain feature) ` - so, for example i have a domain hosted as `check.dev.test.com` and another application `check1.dev.test.com`. The custom domain in auth0 setting is `auth0.dev.test.com` for users with database authentication means username and password and regular domain `check.auth0.com` In the above example my both SPA applications functionality will be like the users with username password authentication will use custom domain `auth0.dev.test.com` to authenticate and other users who login using SSO into their domain (own login screen) will use regular domain `check.auth0.com` to authenticate. I need to mention the way SSO is done - it is like from application 1 i had created a new auth0-lock with application 2 clientId and called checkSession call for that lock after it was successful, navigated into application 2 url by passing the accessToken and other parameters received during the checkSession call. Questions, 1. As per you comment could you please provide me the information that will both type of users be able to SSO into the SPA? 2. Whether the process i had followed is correct? 3. Can the login be skipped using saml login method if yes how to achieve it for single page applications? Because i can see examples for tableau and other applications in documentation which was working. ---
**Author:** ![marcelina.barycka](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/marcelina.barycka/32/56162_2.png) [@marcelina.barycka](https://community.auth0.com/u/marcelina.barycka)\ **Post date:** [January 8, 2024, 10:33am UTC](https://community.auth0.com/t/how-to-authenticate-and-launch-one-application-from-another-application-for-okta-authenticated-user/124035/8 "2024-01-08T10:33:46Z")
Hi @shan2510 ! > [@shan2510](#): > > In the above example my both SPA applications functionality will be like the users with username password authentication will use custom domain `auth0.dev.test.com` to authenticate and other users who login using SSO into their domain (own login screen) will use regular domain `check.auth0.com` to authenticate. For SSO to be possible, these two apps and your Auth0 tenant have to be under the same parent domain - in your scenario, the parent domain would be `test.com` meaning you met the criterion for that. > [@shan2510](#): > > Can the login be skipped using saml login method if yes how to achieve it for single page applications? Just to confirm - you plan to use the Auth0 lock widget hosted in your own server instead of using it together with the Classic Universal Login page (Auth0 hosted login page)? Would Auth0 be the SAML Identity Provider for both apps? ---
**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\ **Post date:** [January 22, 2024, 10:37am UTC](https://community.auth0.com/t/how-to-authenticate-and-launch-one-application-from-another-application-for-okta-authenticated-user/124035/10 "2024-01-22T10:37:00Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.