So, we have our Application(App-A) using Auth0 for Authentication. We have a customer who owns a different application(App-B) which uses a custom IDP or maybe Azure AD. is there a way to integrate these applications in a way that
when a person is logged in and authenticated in the App-B, they have to be automatically authenticated to our App-A . Can I use some kind of an SSO token or any other method for this?
From my understanding of you use case the user has to already be authenticated to another app before being able to sign in to another application, so this can be accomplished by using a redirect after the initial login.
You can use api.redirect.sendUserTo() in a Post-Login Action to send the user to a page that implements a custom authentication method. You can use the api.authentication.recordMethod() in the exports.onContinuePostLogin handler to store a record of the completed method in the user’s session or manage sessions using the event.user.app_metadata object.
There are quite a few steps to be considered here, but you can follow the Redirect with Actions guidelines provided in our documentation, especially the Custom authentication methods section.
I hope this helps your case, but other as well.
Thanks,
Remus