SSO implementation with ADFS and nginx
<p>This would be a typical use case but since we are new to this. I want to get opinion on the authentication.</p>

<p>Environment - Node.js, Ngnix, Kong and ADFS</p>

<p>Requirement - We want to use ADFS as our provider and want to authenticate Node.js users via ADFS. Also, we would have some scenarios where one of our APIs would be calling some other API internally and that needs to be authenticated too.</p>

<p>Questions -
1. Is it a good idea to authenticate on Ngnix/Kong level instead of Node.js?
2. We are trying to use SAML for ADFS integration with Ngnix/Kong but it seems like there are not much modules for that.
3. How can we authenticate a API XYZ which can be used via web browser via a Angular app and also can be called internally by another API? There are options to use secrets but is there any module on Ngnix/Kong which would let us do both kind of authentication on same endpoint?</p>

<p>Thanks in advance for any answers, it would be be a big help.</p>