Authentication

User interface

The PactFlow On-Premises application currently supports single sign for SAML identity providers. It supports both IDP and SP initiated log in.

Any user who is able to authenticate to the configured IDP is allowed access to PactFlow.

The SAML IDP is configured via environment variables.

API

The API is accessed using a bearer token that is set in the HTTP header of the request (eg. Authorization: Bearer <your token here>). The tokens are administered on a per user basis in the settings page of the PactFlow application.