SSO Into the Rep Portal with Impersonation

1.Use an existing API level account or create a new one: Orion Connect > Manage users > New Advisor User > Assigned to the API/Integration Role

2. Authenticate to Orion with API credentials (REST API):

Code:

[GET]
 https://api.orionadvisor.com/api/v1/security/token
 
 [HEADER]
 Authorization: Basic {uid: pwd} – base64 encoded

For the Response you will get an API auth token

 

3.Next you will want to Impersonate a specific Representative and get an API token at their level

Code:

[GET] 
 https://api.orionadvisor.com/api/v1/security/token
 
 [HEADERS]
 Authorization: Impersonate {service level auth_token}
 Entity: 4
 EntityId: {Rep ID}

Response will be the Rep’s token

4.Now you use the Rep token in the Rep Portal URL

• https://rep.orionadvisor.com/sso.html?t={repToken}
• Add query string parameter frame=1 if you will be using this in an iFrame to remove the fullscreen and logout buttons