Retrieving and passing OAM token programatically
Let us assume O1 is an OAM with SSO enabled, A1 and B1 are Web Applications protected by O1. C1 is an application not protected by OAM.
In this scenario, how A1 in which user, u1, has successfully authenticated against O1, can programmatically pass t1 token (SAML, OAM, or sessionid) for u1 to Application B.
Additionally, how B in turn, programmatically, can verify against O1 that t1 is indeed for u1. Is the same possible with C1 ?