Hi SSO usualusualy works like this. You have the following entities - User, Service Provider and Identity Provider
- User requests target resource from the Service Provider
- Service provider sends a request to Identity Provider.
- Identity Provider validates request and request User to login.
- Identity provider sends response (can be token)
- User sends token to Service Provider
- Service provider validates token and redirects(gives access) to the resource.
The Identity Provider is a separate application. "So how can I pass the result to the third party apps ." - Each participant in the SSO should have ability to verify the token.
 
                