I am looking for a solution for my client to access our application with out actually logging in to our application (from user point of view).
Here is the flow.
Users logs in to client application APP1.
User click a link in APP1, that should take user to our application APP2.
APP2 Should validate user details, if user not available in our database create user and forward to requested resource. Note that at this point there is no APP1, APP2 would take over the UI.
User can click a link in APP2 that should take user back to APP1.
Can we achieve this using OAuth? All the implementations i have seen is like, User will have account in both apps, and on click of a link APP2 would provide an authorization mechanism. Once authorized APP1 request resources from APP2.
Our app is based on Java/Spring. And I do not have any control over APP1.