Native Application to Web Application Single Sign-On via Token Exchange
Select an access token (actor) and an ID token (subject) from your wallet. The ID token list auto-filters to match the selected access token's issuer.
Exchange the access token (actor) and ID token (subject) for an interclient token targeted at the web application.
/oauth2/default/v1/token
grant_type=urn:ietf:params:oauth:grant-type:token-exchange
The Source Application will securely transfer the interclient_token to the Target Web Application, in our example we obfuscate via a GUID & copy/paste to the target browser. The additional OAuth parameters are included here as a convenience for saving the configuration in this simulation tool, the target application would designate the launch parameters.
/oauth2/default/v1/authorize
interclient_token={web_sso_token}