New Topic

Community Topic Question Security

Sharwari Inkane

Yellowfin Support Team

Assigned

Category Security

Product Version 9.0

JWT Login

Eduardo Agostinho shared this question ago

Completed

Is there something similar to JWTLogin.i4?jwtToken= but instead of logging into the Yellowfin UI, responses me an access token to use with JS API?

The same question

Replies (3)

Sharwari Inkane ●

Hello Eduardo Agostinho

Thank you for submitting this request to the Yellowfin Technical Support Team. My name is Sharwari Inkane and I will be supporting you with this issue.

In order to assist you please provide us the following information:

The info.jsp file for this instance in HTML format. In order to get this file please follow the instructions in the following link: https://community.yellowfinbi.com/topic/how-to-get-the-info-jsp
I noticed that this email is from a Gmail account, not from your organization. Could you please provide your Company name and official mail address?

Sincerely,

Sharwari Inkane
Yellowfin Technical Support

Reply URL

Eduardo Agostinho ●

Hello Sharwari, my company is SPM Assets and my official mail address is eduardo.agostinho@spmassets.com.

Here is the screenshot of info.jsp:

b2bc63cf37b6f06029c6d112eb644a6a

URL

Sharwari Inkane ●

Hello Eduardo Agostinho,

Thanks for sharing the requested details.

To proceed further, could you please explain the issue in more detail? Additionally, please check the links below which might help you:

https://developers.yellowfinbi.com/dev/api-docs/current/
https://wiki.yellowfinbi.com/display/yfcurrent/Using+SAML+with+SSO
https://wiki.yellowfinbi.com/display/yfcurrent/Using+JWT+Tokens+with+SSO

Please let me know if you have any questions or concerns.

Regards,
Sharwari Inkane

Reply URL

Eduardo Agostinho ●

Hello!

I need an access token to use the JS API, and I know it is possible to obtain it using the REST API with the /api/login-tokens and api/rpc/login-tokens/create-sso-token endpoints. However, to use both of these endpoints, the user must already be synced, meaning my user should already exist in Yellowfin.

I know that Yellowfin has the JWT SSO Authentication Method, but according to the documentation, it seems to only work if I want the user to access the Yellowfin UI. This is possible by passing my JWT token in the /JWTLogin.i4?jwtToken= endpoint, which responds with an HTML page that is the Yellowfin UI. My question is, is there something similar to the /JWTLogin.i4?jwtToken= endpoint that, instead of logging me into the Yellowfin UI, only returns a valid access token to be used with the JS API?

URL

Eduardo Agostinho ●

I want to pass my JWT token, have Yellowfin retrieve the user's info, check if the user needs to be created on the Yellowfin side, and then return a valid access token. With this solution, I wouldn't need to create a synchronization mechanism to achieve that.

URL

Sharwari Inkane ●

Hello Eduardo Agostinho,

Thanks for the detailed explanation.

This is to keep you informed that we have submitted a Jira task to the Product Team for further review or clarification. As soon as we hear back from them, I will update this case for your visibility. Feel free to let us know if you have any questions or concerns; we would be more than happy to assist you.

Regards,
Sharwari Inkane

Reply URL

Eduardo Agostinho ●

Hello Sharwari!

Thanks for keeping me informed, I'll be waiting for your new update.

URL

Sharwari Inkane ●

Hello Eduardo Agostinho,

I checked with our product team, and they confirmed that we do not have a feature similar to JWTLogin.i4?jwtToken= that responds with an access token for use with the JS API, instead of logging into the Yellowfin UI.

Please let me know if you have any questions or concerns.

Regards,
Sharwari Inkane

URL

Eduardo Agostinho ●

Hello Sharwari! Thank you for letting me know.

I don't have more questions, that is all, thanks again.

URL

Sharwari Inkane ●

Hello Eduardo Agostinho,

Thanks for the confirmation. I will now go ahead and mark this case as completed. If you have any other issue please contact us again by opening up a new ticket and we will provide additional support.

Have a great rest of your day!

Regards,
Sharwari Inkane

URL