Cannot login with login API?
-
I'm using SAML.
After calling the login API from my website (www.example.com) and stored access_token and refresh_token cookies to fusionauth website (auth.example.com), when user will be redirect to fusionauth page I see http cookie but fusionauth shows me login page as if I'm not logged in.
I've tried to update the login instant value too.
What am I doing wrong?
-
If you are using the Login API (/api/login) - this does not create an SSO session.
The FusionAuth Login pages do not currently use the access_token or refresh_token cookies for session management.
If you want the SSO feature - you need to use the FusionAuth login pages. This is the strategy outlined in the 5 minute setup guide: https://fusionauth.io/docs/v1/tech/5-minute-setup-guide
We do have a feature open to switch to token based SSO so that this use case would work: https://github.com/FusionAuth/fusionauth-issues/issues/358