Adrian Comments - Answer Overflow

This solution would make sense because in the case of AuthType.EmbeddedSSO we would not have to do any trusted auth setup... the IdP flow will happen inline within the embedded, as you said above

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

I asked the backend group, and yes, they have configured it to use Azure IdP SAML. I changed our client app from Trusted Auth to using AuthType.EmbeddedSSO and I tested, but: -it works in desktop version, -it does not work in iPad version. For iPad, it keeps spinning in the iFrame, and cannot get the report to render. A good doc is here, which agrees with what you have said, and I also agree with this: https://developers.thoughtspot.com/docs/embed-auth ...but not sure what is happening in the iPad case...

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

I am guessing the answer is yes, but just pinged them, let's see what theu say

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

I need to ask them this question, they should know

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

That is the reason for using auto_create=true

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

I believe users using our Application should not already be logged in to TS. We don't want them to login separately. And the 'backend group' does not want to create an account (backend ) to each user

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

They (backend group) basically configure the users that use TS ...

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

I guess they should, I would need to talk to our backend group. They told us: we used this AD Group for TS, record it somewhere ...but this is duplication because I don't want to put this AD Group in our user (db) just because it is coming from TS

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

Then, we register TS SDK init() with callback to retrieve TS Auth Token. The the TS Auth Token is called by TS SDK, and at that time, we can pass our user AD Group

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

Exactly Azure

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

The nice way would be that: inside that Auth Token, I find the AD Group for TS

28 replies

TFDThoughtSpot For Developers

•Created by Adrian on 11/6/2023 in #dev-help

Is this possible In this case the

SO our user uses a browser and logs into our application

28 replies

Gaming

Programming