{
  "id": "bbg-p0093-backend-service-architecture-backend-service",
  "title": "Single Sign-On Authentication Flow",
  "chapter": "identity-access-and-auth",
  "batch": "15",
  "rank": 148,
  "sourcePage": 93,
  "sourcePointer": "p. 93",
  "status": "accepted",
  "reviewerStatus": "reviewed",
  "fidelityScore": 0.9,
  "canvas": {
    "width": 960,
    "height": 640
  },
  "fireworksTechGraph": {
    "style": "style-1-flat-icon",
    "diagramType": "sequence",
    "topologyNotes": [
      "source page render inspected",
      "extracted page text inspected",
      "source page render inspected",
      "preserve SSO sequence: app redirects unauthenticated user to SSO server/login, token/session returns, user accesses multiple apps with one identity",
      "retargeted from backend extraction to identity-access-and-auth chapter"
    ],
    "publicBoundary": [
      "original vector output",
      "no source pixels",
      "no source mark or long wording"
    ]
  },
  "callouts": [],
  "sourceReview": {
    "conceptAnchors": [
      "concept: user visits application",
      "concept: redirect to SSO server",
      "concept: login credentials",
      "concept: token or session",
      "concept: access multiple systems"
    ],
    "labelSource": "curated",
    "semanticStatus": "reviewed"
  },
  "groups": [
    {
      "id": "actors",
      "label": "Participants",
      "x": 58,
      "y": 126,
      "w": 844,
      "h": 110
    },
    {
      "id": "flow",
      "label": "Authentication sequence",
      "x": 58,
      "y": 286,
      "w": 844,
      "h": 150
    }
  ],
  "shapes": [
    {
      "id": "user",
      "kind": "actor",
      "label": "User",
      "detail": "browser",
      "x": 96,
      "y": 142,
      "w": 82,
      "h": 86,
      "tone": "blue"
    },
    {
      "id": "app1",
      "kind": "rect",
      "label": "App one",
      "detail": "needs login",
      "x": 272,
      "y": 154,
      "w": 112,
      "h": 58,
      "tone": "green"
    },
    {
      "id": "sso",
      "kind": "gateway",
      "label": "SSO server",
      "detail": "identity",
      "x": 454,
      "y": 142,
      "w": 122,
      "h": 78,
      "tone": "orange"
    },
    {
      "id": "login",
      "kind": "rect",
      "label": "Login page",
      "detail": "credentials",
      "x": 644,
      "y": 154,
      "w": 112,
      "h": 58,
      "tone": "purple"
    },
    {
      "id": "app2",
      "kind": "rect",
      "label": "Other apps",
      "detail": "reuse identity",
      "x": 782,
      "y": 154,
      "w": 102,
      "h": 58,
      "tone": "teal"
    },
    {
      "id": "redirect",
      "kind": "rect",
      "label": "Redirect",
      "detail": "not logged in",
      "x": 212,
      "y": 326,
      "w": 112,
      "h": 58,
      "tone": "blue"
    },
    {
      "id": "token",
      "kind": "rect",
      "label": "Token session",
      "detail": "issued",
      "x": 424,
      "y": 326,
      "w": 122,
      "h": 58,
      "tone": "green"
    },
    {
      "id": "access",
      "kind": "rect",
      "label": "Access granted",
      "detail": "single ID",
      "x": 650,
      "y": 326,
      "w": 122,
      "h": 58,
      "tone": "teal"
    }
  ],
  "connectors": [
    {
      "from": "user",
      "to": "app1",
      "label": "visit",
      "flow": "main"
    },
    {
      "from": "app1",
      "to": "sso",
      "label": "redirect",
      "flow": "control"
    },
    {
      "from": "sso",
      "to": "login",
      "label": "prompt",
      "flow": "main"
    },
    {
      "from": "login",
      "to": "token",
      "label": "verify",
      "flow": "control"
    },
    {
      "from": "token",
      "to": "app1",
      "label": "return",
      "flow": "data"
    },
    {
      "from": "token",
      "to": "app2",
      "label": "reuse",
      "flow": "data"
    },
    {
      "from": "app2",
      "to": "access",
      "label": "grant",
      "flow": "main"
    }
  ]
}