Skip to main content

Messenger SSO

The Messenger SSO solution provides verifiable communication between VenturEd Solutions and partners over public channels. It is not designed for sensitive information and can be read by an interceptor.

The implementation describes three additional query parameters added to an HTTP request:

  • MessengerSSO, a URL encoded JSON string containing user session information
  • MessengerSign, a signature for verification of the payload
  • MessengerLink, any additional payload required by the communication

The signature is generated using the following formula:

HMAC-SHA256(SHARED_SECRET, MessengerSSO)

The SHARED_SECRET will be provided by your VenturEd Solutions contact.