Login with Webex on Developer Applications and 3rd Party Platforms
September 6, 2022Webex enters a brave new world of allowing users and developers the ability to use their Webex Identity to authenticate to our partners platforms or on a device that does not have a keyboard. Login with Webex removes friction for users and makes their experience 10x better. Webex demonstrated this login capability at Cisco Live where a user can move their meeting from a laptop to a mobile device and for Ford or Facebook when the user logs in a device without a keyboard.
This cross functional team worked diligently for six months across the entire platform to prove the model and test with partners like Ford and Facebook. They built this feature using the OpenID Connect Standard so that Security was built in not bolted on. Embebedded Applications were a key business reason for the new capability, to remove friction when users did no have an account on the partner's platform, so the client team engaged with partners to prove the model would work. The feature has been deployed on developer.webex.com for all our developer teams to use with world class documentation and developer support.
Key Features supported
Login with Webex supports the following OAuth flows:
- Authorization Code Flow and Authorization Code Flow with PKCE for devices with a web browser and keyboard. Authorization Code Flow with PKCE is the recommended flow as it provides the best security.
- Device Grant Flow is designed for smart TVs and other devices without a web browser or with limited input abilities. Note that Device Grant flow does not support OpenID Connect scopes.
- Implicit Grant Flow allows an OAuth client to obtain access and ID tokens directly from the authorization server in a single request. This flow is discouraged from use due to security concerns.
OAuth 2.0 and OpenID Connect API Endpoints
OpenID Connect is built on the OAuth 2.0 protocol, the same protocol used by Webex Integrations to get permission from a user to make Webex API calls on their behalf. With Webex OAuth 2.0 APIs you can both obtain an ID token that proves the user has authenticated with Webex, and an access token to make API calls.
- Authorization Endpoint
- Device Authorization Endpoint
- Access Token Endpoint
- Device Token Endpoint
- UserInfo Endpoint
- Verification Endpoint
- Discovery Endpoint
- Webfinger Endpoint
Product Documentation
The home for Login with Webex documentation is on the Webex Developer Portal at https://developer.webex.com/docs/login-with-webex
Demo of the Ford Lightning
[https://www.youtube.com/watch?v=kd_HwyTX1lg](https://www.youtube.com/watch?v=kd_HwyTX1lg)
Apple Move Meeting from Mac to Mobile
[https://youtu.be/Aj100uP9QGc](https://youtu.be/Aj100uP9QGc)
Your Feedback Matters
If you have feedback, suggestions, or you are encountering issues using the Login with Webex tools, please reach out to our support team https://developer.webex.com/support, and we will be happy to help! In addition, feel free to post questions (and answers) in our Webex Developer Community.