By: marc caron user 07 Dec 2016 at 2:52 p.m. CST

1 Response
marc caron gravatar
Hello We have a group focusing on implementing all of the authentication and authorization scenarios we have. Specifically they are working in .NET/C# as it's our primary language/platform. User authentication works. Next step they are working on is passing that token to the next service in the chain (multiple-hop scenario) and they are having issues making this work. Specifically the question i've received is "Can you reach out to Gluu and ask if token chaining is supported out of the box. I’ve tried the token exchange (using oxauth_token_exchange on the token endpoint), but I don’t think that is what it is intended for. What we are trying to do is take the initial access token, and exchange it for a new token that maintains the same scopes, but for a new client & RP" Any examples and/or direction you have on this would be appreciated. thanks

By Michael Schwartz Account Admin 07 Dec 2016 at 2:54 p.m. CST

Michael Schwartz gravatar
We recommend use of UMA or OAuth2 for this (i.e. issuing a new token). I suggest scheduling a call to review: [http://gluu.org/booking](http://gluu.org/booking) Also, we have some handy new client software to help you do this :)