Steps to Login via a Custom Web App

1. The custom web app should either start the process below automatically on login or must have a Login via SSO button, which when clicked starts the sequence of events.
2. The custom app should use the authorization code grant type mechanism using the client ID, client secret and Scope to fetch an authorization token from WMS IDCS using the authorization URL provided by IDCS
   • This should cause a redirection to the IDCS authorization URL web page, in which the user can login with their WMS IDCS username and password. This approach negates the need for the custom app to have its own login page.
3. The retrieved token should be saved by the custom web app
4. The custom web app can now make calls to WMS lgfapi's using this token.
   Note: the Redwood Mobile API is not supported from custom web applications. Refer to the next section for further information.