We’re currently using Auth0 which is acting as a OAuth IdP and a SP for other solutions.
I took a look at the documentation and solution for a bit and question: since it appears to be proxying the login to the backend and then doing the logic for federating, is this not using OAuth and issuing an ID/AT to the frontend?
Reason why I am am asking is our Zapier integration uses OAuth to get an AT to make API calls to our services, and theres a potential for it to double federate. For example:
Zapier --> TurboDocx Login --federate--> Client's SSO vendor
What would this architecture look like using SuperTokens (and i believe Jackson is the one doing the SP federation )