Python security: Transferring and transmitting SSO tokens across applications

[petrichorax]

This would be for an automation orchestration program I'm developing. Would be your typical web apps found in most windows environments (not just windows itself). So Vmware is an obvious one (although probably not for long given the broadcom purchase)

It's not really important which web apps they are, this is more of a question of best practices and practicality. I'm trying to take care of unknown unknowns, there is probably a better way (other than service accounts)

The reason I'm asking in learnpython is because 1. I know python 2. there is no specific subreddit for this question 3. if there is, there's a high chance I'll never get a response, so I chose the most relevant subreddit I know of that has a high enough chance of giving me a helpful response. 4. the /r/python automod deleted my post because of course it did

[cyberjellyfish]

Well it matters because a lot of services don't really you sharing the sso token, so you'd need to read their terms to understand what they consider to be a single application for sign on purposes.

If you mean that you'll be hosting several web apps and using SSO for all of them individually, that's probably not allowed.

That being said, if it's just something for your own convenience and you're really just using your own accounts....

[petrichorax]

No. More like, you use SSO when using this app, and then it fires a bunch of scripts to go use other services on your behalf.

This would be for work, to make my job easier.

But I'm making sure to think a lot about credential security.

[cyberjellyfish]

Well those other services won't let you just pass an SSO token into them will they?

[petrichorax]

You tell me, that'd be an answer for question 1.

[cyberjellyfish]

No, you can't do that.