There is a lot of information on the web about using JWT (Json Web Token) for authentication. But I still didn\'t find a clear explanation of what the flow shou
The user should be redirected to the authentication server again and get a new token (JWT), one that is specifically targeted for example2.com. This is how OpenID Connect and any other cross-domain federated SSO protocol works.