Easy: Standard SSO
With standard SSO, you generate and use a single URL to create an embed user and session. This is the simplest way to embed Omni for your external users.Advanced: 2-step SSO
With 2-step SSO, you start by sending aPOST request to generate the embed user and session. Then, you’ll generate and use a URL to authenticate into the session. This requires more setup, but has a few advantages over the standard SSO embed experience:
- Sensitive user data: If using the
userAttributesparameter with sensitive user data, you may prefer creating SSO embed users and sessions viaPOSTrequest for added security. - URL length: While generally unlikely, there is more risk of standard SSO embed URLs exceeding a browser’s URL character limit. 2-step login URLs are more compact and thus have no risk of hitting the limit.