We have a SPA which is connected to a custom built back-end API. We had recently moved to auth0 and we have been using it for authentication for sometime. Auth0 returns access token etc and Auth0.js handles the authentication. For all API calls the access token is sent to the back-end API and everything’s working fine.
Recently SSO was also implemented and ADFS and okta connections work fine if we navigate to our application first and then login.
If we go to okta dashboard and click on our application (IdP initiated SSO) it does not work. The access token that we get is not a JWT and moreover the backend API cannot authenticate the user with that token.
Is there a way to get IdP initiated SSO to work in this scenario?