Single Sign-On

OAuth2 Authentication Flow

How to use e-Schooling Account to authenticate in your application

First of all, to use the e-Schooling Account to access your application it needs to be registered in our system together with the redirect URIs you may want us to redirect the user after the credentials verification. This redirect URIs must expect a parameter named “code” in order to follow the OAuth2 authentication flow.

You will be assigned a client_id that is associated to those given redirect URIs.

After this registration is completed the process will behave as following:

Step 1

External application redirects it’s user to the e-Schooling external authentication page using the following url:

https://app.e-schooling.com/oauth2/login?response_type=code&client_id={your_client_id}&redirect_uri={your_redirect_uri}

The user will be presented with the following page:

User enters credentials to be validated.

client_id and redirect_uri are verified.

A code is generated and the user is redirected to the given redirect_uri as shown in the following example: https://app2.com/home/index?code=9d7be3d1-6e34-4bb8-8319-3a64893ffa43

This code is valid for 10 minutes.

Step 2

The code obtained in the previous step allows the external application to call the e-Schooling API “oauth2/token” method.

The code is validated using the given client_id and redirect_uri. If the client_id or redirect_uri doesn’t match with those associated to the code or the code is expired the response will be “invalid_grant”.

JWT token is generated and returned.

Step 3

Use the token to obtain information about the user calling the e-Schooling API “oauth2/me” method. This method will return the user email and the tenant where the user logged in.

OAuth2 Authentication Flow#

How to use e-Schooling Account to authenticate in your application#

Step 1#

Step 2#

Step 3#

OAuth2 Authentication Flow

How to use e-Schooling Account to authenticate in your application

Step 1

Step 2

Step 3