SSO support for the mobile API

[xzetic]

I enter the correct Condeco service url and also the username which can be seen in the condeco website. But for the password we are actually using SSO. When I tried to input my SSO password it didnt work, even using my SSO email address as username also not working. Any possible way to fix it?

[fiddyschmitt]

Thanks @xzetic, the program doesn't yet support SSO. I'll have to look into how Condeco does SSO.

[xzetic]

Ok understand, thanks for the information. Hope you could find a way, it will be really helpful. Thanks!
Do you know if this program can also support booking for another user, similar with condeco mobile app?

[fiddyschmitt]

Awesome idea to support booking for other users! I've raised a separate issue here: #8

Regarding the mobile app, do you sign onto that using SSO as well?

[xzetic]

Yes thats definitely awesome, thanks for opening another issue for this topic!
Right, the mobile app are also using SSO using the MS Company Portal. But it is also fine to have this CLI web version, just not sure if we can use the same endpoint which allow to book multiple user from mobile into web, I would assume they are using same APIs.

Thanks a lot! Let me know if anything I could help.

[d3wy]

@fiddyschmitt I'd like to +1 this suggestion. Unfortunately I'm well out of my depths on dev for this but if you require any testing or data please don't hesitate to reach out, if you wish to work on it, if not that's cool. I understand you probably don't need the funtionality yourself. Appreciate you sharing this out in the wild either way!

[fiddyschmitt]

Thanks @d3wy , I really appreciate it. I'm currently implementing a couple of things that may enable use with SSO. One is the mobile API, which supports long duration sessions using a guid (just need to find a way to get that guid after signing on with SSO). Another way might be this SendMagicLink API call. I just need to study what it does.
Thanks for the offer; I'll let you know if I need some data :)

[fiddyschmitt]

Hi @xzetic, @d3wy,

I have something that might allow us to use SSO.

The instructions are here: https://github.com/fiddyschmitt/condeco-cli/wiki/Log-in-using-a-token

Then use this version to log in: https://github.com/fiddyschmitt/condeco-cli/releases/tag/v1.6.0a

[d3wy]

Might take me a few days to validate (don't have the android environment readily available) but I'll report back shortly!

[d3wy]

Welp, getting Android studio functioning was a pain, turns out there is some issue with AMD Hardware and Windows HyperV that impacts Android Emulator working.

Anyway, I did the thing and followed your instructions which were great except adb was in C:\users\[username]\AppData\Local\Android\Sdk\platform tools.

Unfortunately, the bad news is for my login method I don't see the LoginAPI/auth url anywhere. And I did manage to find a 'token' in a response from MobileAPI/mobileservice.svc/User/GetSessionTokenV2 which was within a json blob "DeskResults". I am not sure that's the guid I was looking for, and it it was, it certainly didn't work :D

I did see an oauth2 access and refresh token (type Bearer) provided with an expires in of 77759999 which I imagine is 90 days? Not sure if this is of any use or not but it was a POST to sso.condecosoftware.com/as/token.oauth2/

Anyway, either my org is using a different sso provider or I'm too dense to work it out. It appears we are using Entra.

I'll preface this by saying I'm NOT looking for hand holding support or similar, but if you are interesting in testing it a little further I believe I followed you on LinkedIn if you want to touch base we are in the same regional location. No harm at all either way.

[fiddyschmitt]

Amazing! Thanks @d3wy! I really appreciate the effort you've gone to.

The token we're after is used in most of the requests. If you click around in the Engage app, you should see a number of them such as:

/MobileService.svc/MyBookings/ListV2?sessionGuid=
/MobileAPI/MobileService.svc/team/GetMyTeams?userlongId=
/MobileAPI/MobileService.svc/GetAllRoles?userlongId=
/MobileAPI/DeskBookingService.svc/GetAttendanceRecord?accessToken=

Just confirming you ran condeco-cli with --api mobile, and after you added your account your config.ini has the token, rather than password?

Oh nice, yes I'd be keen to catch up. I'm in the city most days - let me know if you come in.