We have a web application and our partners ask us to login silently from their web applications allow their users to make a single login on their sites without login twice to access our application.
Obviously, their and our applications need to remain separate applications and, in another context, needs to have their own login page.
At first, we thought to integrate an SSO like
Identity Server but can it manage this scenario? can, a web request, be sent to an SSO for login silently the user without redirecting the browser to the second application?
The second solution is to create a button on the external application that calls our application passing token generated by us with a sort of private and public key.