Application single sign-on

Updated at:
Copy as MD

Implement single sign-on (SSO) from the Alibaba Cloud buyer console to a service provider's application management console.

After a product is provisioned, buyers can use SSO to access the service provider's application management console. Alibaba Cloud Marketplace constructs a sign-on URL from the `authUrl` in the `appInfo` parameter returned by the create instance API and the SSO request parameters. When the service provider receives this URL request, it validates the SPI security token and confirms that the `timeStamp` meets the required constraints. If both checks pass, the buyer is automatically logged in to the management console.

Parameters

Parameter

Required

Type and range

Description

action

true

String

Static field: verify

instanceId

true

String

The instance ID provided by the service provider.

timeStamp

true

String

The current time (yyyy-MM-dd HH:mm:ss).

token

true

String

Security token.

Example

http://example.aliyundoc.com?token=920704d52c2f0db89fd5d472f2819ec3&action=verify&instanceId=1&timeStamp=2013-01-01 01:01:01