In order for an SSO-integrated External Application to create an issue in next4biz, it has to issue a GET request to next4biz in the following format:

http://[virtualPath].next4biz.com/sso.aspx?response_type=token&bc_id=2&scope=customer_create_issue&client_id=ir3EkmW92C…&nonce=1&state=12345

The virtualPath in the link is defined when a company is first created in the next4biz system. Hence, the virtualPath is provided by next4biz.

The response_type and scope parameters in the querystring are static values as shown above.
bc_id stands for Business Channel ID, and is provided by next4biz once the company is created. Nonce and client_id parameters are described later in this section.

State parameter is used to match the request to the response. This parameter is optional. If the state parameter is sent, it is supposed to be a unique string value and the response is expected to have the same state value in order for the request and the response to be paired.

Once the access token is acquired from the sso.aspx page, a request is made to login.aspx in the following format:

http://[firmadizini].next4biz.com/Login.aspx?access_token=fmac-a002b792-6814bbe07fcd405c844c86bccccd226c