Skip to main content
Version: 2.0.0

Authentication

Overview​

Authentication is handled entirely by the host application — the application that integrates and renders the web components. Users authenticate against the host application, and the resulting token is then passed down to the web components.

The web components themselves do not manage any authentication flow. They rely on the token provided by the host application to make authorized requests.

How It Works​

  1. The user authenticates on the host application.
  2. The host application obtains an access token from its identity provider.
  3. The token is passed as an attribute to the web component.
<sodexo-component token="YOUR_ACCESS_TOKEN" />

Identity Provider Requirements​

In order for Sodexo to retrieve user information and properly configure the environment, we will ask you to provide details about your Identity Provider (IdP).

Your IdP must be OIDC-compliant (OpenID Connect). Sodexo will use this information to validate tokens and fetch user claims.

Please contact Sodexo to initiate the IdP configuration process before going live.