{"action":"opened","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1645","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1645/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1645/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1645/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1645","id":96786625,"number":1645,"title":"Question: Which is the recommended way to use Single Sign On between SPA applications?","user":{"login":"Condor2708","id":4700298,"avatar_url":"https://avatars.githubusercontent.com/u/4700298?v=3","gravatar_id":"","url":"https://api.github.com/users/Condor2708","html_url":"https://github.com/Condor2708","followers_url":"https://api.github.com/users/Condor2708/followers","following_url":"https://api.github.com/users/Condor2708/following{/other_user}","gists_url":"https://api.github.com/users/Condor2708/gists{/gist_id}","starred_url":"https://api.github.com/users/Condor2708/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Condor2708/subscriptions","organizations_url":"https://api.github.com/users/Condor2708/orgs","repos_url":"https://api.github.com/users/Condor2708/repos","events_url":"https://api.github.com/users/Condor2708/events{/privacy}","received_events_url":"https://api.github.com/users/Condor2708/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-07-23T10:57:21Z","updated_at":"2015-07-23T10:57:21Z","closed_at":null,"body":"I have two different SPA applications implemented using Implicit Flow with IdentityServer v3 and using the oidc-token-manager.js client library with sessionStorage for the access_token. \r\nI need to redirect from APP1 to APP2 using the same user identity\r\nAPP1 using WebApi1\r\nAPP2 using WebApi2\r\n\r\nWebApi1 and WebApi2 uses Bearer Token Authentication and are defined as two different Clients in IdentityServer3.\r\n\r\nAfter redirect from Application1 to Application2 I call TokenManager.redirectForToken() and a new access_token is created for Application2. Is that the right way to use SPA and SSO? Or am I missing something.\r\n\r\nThanks \r\n"}}