We are currently developing an app for Connections Cloud using the service_menu extension point to navigate to our app, which then integrates the Connections nav-bar for a seemless experience for the end user.
However, requests to our system have to be authenticated. The user has at that point logged in to Connections and I feel it would be detrimental to user experience if we ask him to provide his credentials again during the OAuth dance to retrieve his token. From the documentation I understand, that OAuth and SAML are my only options here. How can I solve authentication withouth bothering the user to provide his credentials again and make the integration appear as seemless as possible in this scenario?