Authentication

The Swagger Contract Testing On-Premises application currently supports single sign for SAML identity providers. It supports both IDP and SP initiated log in.

Any user who is able to authenticate to the configured IDP is allowed access to Contract Testing On-Premises.

The SAML IDP is configured via environment variables.

The API is accessed using a bearer token that is set in the HTTP header of the request (e.g., Authorization: Bearer <your token here>). The tokens are administered on a per user basis in the settings page of the Contract Testing On-Premises application.