Cannot login with login API?

dan · 23 Apr 2020, 16:50

I'm using SAML.

After calling the login API from my website (www.example.com) and stored access_token and refresh_token cookies to fusionauth website (auth.example.com), when user will be redirect to fusionauth page I see http cookie but fusionauth shows me login page as if I'm not logged in.

I've tried to update the login instant value too.

What am I doing wrong?

dan · 23 Apr 2020, 16:51

If you are using the Login API (/api/login) - this does not create an SSO session.

The FusionAuth Login pages do not currently use the access_token or refresh_token cookies for session management.

If you want the SSO feature - you need to use the FusionAuth login pages. This is the strategy outlined in the 5 minute setup guide: https://fusionauth.io/docs/v1/tech/5-minute-setup-guide

We do have a feature open to switch to token based SSO so that this use case would work: https://github.com/FusionAuth/fusionauth-issues/issues/358