Get session token to SSO to Sisense application

Questions SAML
1

Can we fetch session token for an IDP authenticated user as it doesn’t have any password or credentials to login

2

No, you can only get a sessionToken from the /authn endpoint. Users logging in through an IdP will have their session cookie set for them by the Okta domain once Okta is able to confirm that user has logged into their IdP.

3

How can we use session cookie in SSO user into Sisense

4

I don’t understand, what is Sisense? Is this an OIN app? A Custom SAML app?

6

If the user already has a session with Okta in their browser, you can omit the sessionToken portion of the URL to log the user into the SAML application

7

You mean in case of IDP authenticated user should be logged in browser?

8

Yes, IDP users have to be logged in via the browser, since they do not have a password with Okta you will not be able to log them in via /authn to get a sessionToken. Instead the user should first be logged into Okta via their IdP and THEN you can make a request to SSO the user into the SAML application within the Okta Org