Does Geotab allows 3rd parties to integrate with authorization process?
For instance, if I want to build a software using vehicle data from Geotab by cloud-to-cloud integration, what is the option?
Using customer's credentials is the only option, like the below? https://geotab.github.io/sdk/software/api/clients/
Thank you,
Koh
You need to be logged in to reply to this post and participate in the Geotab Community discussions.
Hi @KUeha-1540 ,
Yes. MyGeotab supports Single Sign-On (SSO) user authentication via the SAML 2.0 specification with both Identity Provider (IdP)-initiated and Service Provider (SP)-initiated protocol bindings.
You can take a look at this document: MyGeotab SAML 2.0 SSO Integration Guide [PUB]
Best,
Ron
Hi @KUeha-1540 ,
Yes. MyGeotab supports Single Sign-On (SSO) user authentication via the SAML 2.0 specification with both Identity Provider (IdP)-initiated and Service Provider (SP)-initiated protocol bindings.
You can take a look at this document: MyGeotab SAML 2.0 SSO Integration Guide [PUB]
Best,
Ron
Thank you @Ron-1094 that's great information. Please let me ask a bit.
Is there a way to access the Geotab API from 3rd parties via SSO?
Using user's credential is the only what I have found so far.
https://geotab.github.io/sdk/software/api/clients/
My understanding is that SSO is a solution for authentication. I think I don't know how SSO could be used also for authorization.
Thank you!
For an integration you'd want to use a service account. This document describes their use with recommended guidelines.
https://docs.google.com/document/d/1KXJY3S6xyTjp9-qLgxo4PTedQjEuxrqKDlVWgfcC_lc/edit?usp=sharing
You would probably not want to use any person-identity SSO for an integration, due to the inherent requirement of human interaction at each session expiration (Geotab's usual session management mechanisms are preserved regardless of login method).
Thanks,
Ken Wallen
Senior Solutions Engineering
Thank you @KenWallenGeotabSeniorSolEng-1228 !
Is the service account technically the same with usual user account?
I'm asking since I couldn't find any difference than registering a general user. Looks there is no option to select user type or access control for service account, just adding a generic user who is not associated with real person.
Thanks,
Koh