Im using saml auth for employees at my company…and they goal is to be able to have them login to a OIDC application.
I have got it to the point where okta does the authentication redirects me to my OIDC application, but it only gives me a ID_token. I need a access token so I can load data from my API.
Not sure what the best solution is here. I could start using the id_token to validate API calls, but I hear that is the wrong approach.