Pega Open ID authentication

Hello All,

We have a below requirement , am not sure what’s the best way to acheive this

Currently we are using Ping Federate Open ID to authenticate and give access to Pega for our internal users

Now there is a new requirement where we need to give Pega access to external users who are not part of our organization.

External users will launch Pega from Third party website. When they launch pega from third party website we want to call their external IDP and once we receive access token from external IDP,we want to redirect to our internal IDP to validate the access token we receive from external IDP.

If the token validation is successful by internal IDP then we will grant then Pega access

in Summary is it possible to call two different IDP providers one after another and pass the access token across them ?

Both IDP providers are open ID .

@RamprasadM1091 there is something similar posted in Reuse Authentication service token for REST connector, OpenIDConnect- Refresh token questions and Using Client assertion instead of Client Secret in OIDC flow

The main documentation is in Configuring the identity provider for a SAML SSO authentication service

@MarijeSchillern Thank you. Let me explore, Looks like the posted links are promising and i am going to try