I am doing QA for a website, and they have recently added SSO integration for their website.
- How can I manually test that this SSO integration is working fine.
- Also I need to automate the testing of SSO integration . How can i do that?
Software Quality Assurance & Testing Stack Exchange is a question and answer site for software quality control experts, automation engineers, and software testers. It only takes a minute to sign up.Sign up to join this community
SSO can be tested using API Testing via Postman or SOAP or what ever API tools you are using. Every page of the website will have some or the other endpoints. If SSO is implemented then all the endpoints will require a specific one time token.
To generate the token first execute the Login API with username and password and generate the Auth Token. This Auth Token should then be used as "Auth-Token" in the Header or in the Body of request of the API.
If SSO has been implemented and then if you hit those endpoints or API's separately without passing the Auth-Token in the header then those endpoints will fail else it will pass.
For Automating the SSO use Rest Assured.