Layer7 API Management

I'm trying to see here if anyone has been able to successfully integrate native mobile application with Layer7 API Gateway login page with Salesforce.com IdP (SF IdP). Here is the an architecture below.

1. Mobile Customers app (call Layer7 authorize login endpoint) --> Layer7 (facilitates the login page and customer auth'n with SF IdP) --> SF IdP (Not sure which auth flow will be used) --> Layer7 (successful customer logins) --> Customers (200 Ok)

We have been able to integrate mobile apps with Layer7 and SF IdP when calling the token endpoint. Here is an architecture below which works for us:

2. Mobile Customers app (call Layer7 token endpoint) --> Layer7 (introspect the tokens with SF IdP) --> SF IdP (JWT IdP, OAuth 2.0 flow, SAML) --> Layer7 (successfully retrieves tokens) --> Customers (200 Ok)

This is not related to MAG. This is purely Layer7 API Gateway policy integration with SF IdP when calling the Authorize endpoint. Also SF cloud does not support username-password grant type. So question is around the Authorization Code flow integration (auth'n protocol can be OpenID Connect or OAuth or SAML). 

Here is the integration page from SF. https://help.salesforce.com/articleView?id=remoteaccess_oauth_flows.htm&type=5

I'm trying to see here if anyone has been able to successfully integrate native mobile application with Layer7 API Gateway login page with Salesforce.com IdP (SF IdP). Here is the an architecture below.

1. Mobile Customers app (call Layer7 authorize login endpoint) --> Layer7 (facilitates the login page and customer auth'n with SF IdP) --> SF IdP (Not sure which auth flow will be used) --> Layer7 (successful customer logins) --> Customers (200 Ok)

We have been able to integrate mobile apps with Layer7 and SF IdP when calling the token endpoint. Here is an architecture below which works for us:

2. Mobile Customers app (call Layer7 token endpoint) --> Layer7 (introspect the tokens with SF IdP) --> SF IdP (JWT IdP, OAuth 2.0 flow, SAML) --> Layer7 (successfully retrieves tokens) --> Customers (200 Ok)

This is not related to MAG. This is purely Layer7 API Gateway policy integration with SF IdP when calling the Authorize endpoint. Also SF cloud does not support username-password grant type. So question is around the Authorization Code flow integration (auth'n protocol can be OpenID Connect or OAuth or SAML). 

Here is the integration page from SF. https://help.salesforce.com/articleView?id=remoteaccess_oauth_flows.htm&type=5

I'm trying to see here if anyone has been able to successfully integrate native mobile application with Layer7 API Gateway login page with Salesforce.com IdP (SF IdP). Here is the an architecture below.

1. Mobile Customers app (call Layer7 authorize login endpoint) --> Layer7 (facilitates the login page and customer auth'n with SF IdP) --> SF IdP (Not sure which auth flow will be used) --> Layer7 (successful customer logins) --> Customers (200 Ok)

We have been able to integrate mobile apps with Layer7 and SF IdP when calling the token endpoint. Here is an architecture below which works for us:

2. Mobile Customers app (call Layer7 token endpoint) --> Layer7 (introspect the tokens with SF IdP) --> SF IdP (JWT IdP, OAuth 2.0 flow, SAML) --> Layer7 (successfully retrieves tokens) --> Customers (200 Ok)

This is not related to MAG. This is purely Layer7 API Gateway policy integration with SF IdP when calling the Authorize endpoint. Also SF cloud does not support username-password grant type. So question is around the Authorization Code flow integration (auth'n protocol can be OpenID Connect or OAuth or SAML). 

Here is the integration page from SF. https://help.salesforce.com/articleView?id=remoteaccess_oauth_flows.htm&type=5

I'm trying to see here if anyone has been able to successfully integrate native mobile application with Layer7 API Gateway login page with Salesforce.com IdP (SF IdP). Here is the an architecture below.

1. Mobile Customers app (call Layer7 authorize login endpoint) --> Layer7 (facilitates the login page and customer auth'n with SF IdP) --> SF IdP (Not sure which auth flow will be used) --> Layer7 (successful customer logins) --> Customers (200 Ok)

We have been able to integrate mobile apps with Layer7 and SF IdP when calling the token endpoint. Here is an architecture below which works for us:

2. Mobile Customers app (call Layer7 token endpoint) --> Layer7 (introspect the tokens with SF IdP) --> SF IdP (JWT IdP, OAuth 2.0 flow, SAML) --> Layer7 (successfully retrieves tokens) --> Customers (200 Ok)

This is not related to MAG. This is purely Layer7 API Gateway policy integration with SF IdP when calling the Authorize endpoint. Also SF cloud does not support username-password grant type. So question is around the Authorization Code flow integration (auth'n protocol can be OpenID Connect or OAuth or SAML). 

Here is the integration page from SF. https://help.salesforce.com/articleView?id=remoteaccess_oauth_flows.htm&type=5

I'm trying to see here if anyone has been able to successfully integrate native mobile application with Layer7 API Gateway login page with Salesforce.com IdP (SF IdP). Here is the an architecture below.

1. Mobile Customers app (call Layer7 authorize login endpoint) --> Layer7 (facilitates the login page and customer auth'n with SF IdP) --> SF IdP (Not sure which auth flow will be used) --> Layer7 (successful customer logins) --> Customers (200 Ok)

We have been able to integrate mobile apps with Layer7 and SF IdP when calling the token endpoint. Here is an architecture below which works for us:

2. Mobile Customers app (call Layer7 token endpoint) --> Layer7 (introspect the tokens with SF IdP) --> SF IdP (JWT IdP, OAuth 2.0 flow, SAML) --> Layer7 (successfully retrieves tokens) --> Customers (200 Ok)

This is not related to MAG. This is purely Layer7 API Gateway policy integration with SF IdP when calling the Authorize endpoint. Also SF cloud does not support username-password grant type. So question is around the Authorization Code flow integration (auth'n protocol can be OpenID Connect or OAuth or SAML). 

Here is the integration page from SF. https://help.salesforce.com/articleView?id=remoteaccess_oauth_flows.htm&type=5