I am doing QA for a website, and they have recently added SSO integration for their website.
- How can I manually test that this SSO integration is working fine.
- Also I need to automate the testing of SSO integration . How can i do that?
SSO can be tested using API Testing via Postman or SOAP or what ever API tools you are using. Every page of the website will have some or the other endpoints. If SSO is implemented then all the endpoints will require a specific one time token.
To generate the token first execute the Login API with username and password and generate the Auth Token. This Auth Token should then be used as "Auth-Token" in the Header or in the Body of request of the API.
If SSO has been implemented and then if you hit those endpoints or API's separately without passing the Auth-Token in the header then those endpoints will fail else it will pass.
For Automating the SSO use Rest Assured.