Example

The example below launches published resource 2 for a user from a browser page on your portal. The payload is submitted as a standard form-style POST so that the browser follows the Gateway's 302 redirect as a top-level navigation.

<script>
function launchResource(username, password) {
  const payload = {
    username: username,
    password: password,
    login: "https://your-portal.example.com/login",
    logout: "https://your-portal.example.com/logout",
    appid: 2,
    theme: "dark",
    extra: {
      redirectLinks: true,
      redirectSound: true
    }
  };

  // Submit as a top-level POST so the browser follows the 302 redirect
  const form = document.createElement("form");
  form.method = "POST";
  form.action = "https://gateway.example.com/userportal/auth-handoff";

  // <adjust field encoding to match the Gateway's expected content type>

  document.body.appendChild(form);
  form.submit();
}
</script>

After the POST:

1. The Gateway validates the credentials.

2. The Gateway responds with a 302 and a Location header pointing to the User Portal destination.

3. The browser navigates to the User Portal, where the user is signed in, and resource 2 is launched.

To sign the user in to the User Portal without launching a specific resource, omit appid — the user will see all published resources available to them.