Dual Token Awareness support in Insights Hub SSO Mendix module

0
Hi Team,We received a customer question regarding the Insights Hub IAM migration to Xcelerator IAM and Gateway Services.The customer is using the SiemensInsightsHubSingleSignOn module in their Mendix applications. The apps are hosted in Mendix Public Cloud and provisioned through their Insights Hub tenant.According to the Insights Hub migration guide, applications need to ensure Dual Token Awareness during the transition:https://documentation.mindsphere.io/MindSphere/apps/insights-hub-iam-migration-to-xcelerator-iam-and-gateway-services/customer_transition.htmlCould you please help clarify:Is there any new version of the SiemensInsightsHubSingleSignOn module planned to support Dual Token Awareness for both the existing Insights Hub IAM and the new Xcelerator IAM?Are any additional configuration or application changes required for existing Mendix apps during the migration?Is there any updated documentation or migration guidance specifically for Mendix applications using this module?Thanks a lot for your support.Best regards,Shasha
asked
2 answers
2

Hi Shasha,

Based on Stefan's response, it sounds like support for the dual-token approach is planned through a new version of the SSO module.

In the meantime, I would recommend avoiding any custom token validation logic that assumes a single IAM provider. If your application relies exclusively on the SiemensInsightsHubSingleSignOn module for authentication and authorization, the migration path will likely be much smoother once the updated module becomes available.

From previous IAM migrations, the areas I'd review proactively are:

  • Any custom Java actions or microflows that inspect token contents.
  • External REST integrations that forward or validate access tokens.
  • User provisioning logic that depends on specific claims, roles, or token attributes.
  • Environment constants or endpoints that are tied directly to the current Insights Hub IAM setup.

If none of those have been customized and authentication is fully delegated to the SSO module, I would expect the majority of the migration effort to be handled through the updated module and its configuration.

It would definitely be helpful if the product team could share migration guidance once the new module is released, especially for customers running production applications in Mendix Public Cloud.

Hope that helps while waiting for the official documentation.


answered
1

A new SSO module which is supporting Mendix 11 and dual token approach is planned.

Please contact Insights Hub customer service if you need more information

answered