New Xton Documentation Center
Xton help has moved. Please visit the current version of this page for the most recent updates. Our new documentation center can be found at help.xtontech.com.
How to call the XTAM REST API functions with the Federated Sign-in Module deployed
To use the XTAM APIs with the Federated Sign-in Module enabled please follow the procedure described in the Secure Authentication / Federated Authentication using this API guide:
https://www.xtontech.com/resources/faq/rest-api-shell-scripts/
There is a cas_auth function in the script example including the function itself and the example of its use. For the token-based authentication for scripts (so to use it without user and password) look for the token_auth function on the same page.
In short, the flow is that the script takes user/password or a token and exchanges it for ticket-granting-ticket (TGT) in the Federated Sign-in Module returned in the Location header. Then it posts to this location exchanging a ticket-granting-ticket to a service ticket (ST). Then it uses XTAM to exchange Service Ticket for a cookie (JSESSION) that it can use for all subsequent REST API calls. Tickets are short-lived, cookie is not. It is a standard practice for the headless federated sign in and is outlined in the cas_auth/token_auth examples.