The Session Transfer Token for Native to Web SSO is Not Working for a Multiple Application Scenario

The use case involves the following scenario using the Session Transfer Token (STT):

Native Application (STT is issued) > Single Page Application (SPA) (STT is used successfully) > Regular Web App (STT usage fails and login prompt shown)

This article clarifies if an STT can be used multiple times.

• Native to Web SSO

The Session Transfer Token (STT) is designed for single use only.

The same Session Transfer Token (STT) cannot be used for this use case as the STT is single-use ONLY and has a short lifetime of one minute. Therefore, in this use case, since the STT has already been consumed by the Single Page Application, a fresh token would need to be issued to get access to the Regular Web Application via Single Sign-On (SSO).