Authorization
Authorization
Some applications require explicit Admin authorization before use with an enterprise. The steps an Admin needs to take are dependent on the developer-selected authentication method and enabled enterprise settings.
Authentication methods
The following authentication methods always require explicit Admin authorization:
These authentication methods automatically generate a Service Account. With the right scopes enabled, a Service Account can perform many Admin actions, thus requiring Admin authorization before use.
OAuth 2.0 and App Token apps may also require explicit Admin authorization based on enabled enterprise settings.
Enterprise settings
Subsequent steps are required if any of the following enterprise settings are enabled:
- Disable published apps by default
- Disable unpublished apps by default
- Require manual admin authorization for transactional access apps
These settings can be found by navigating to:
Admin Console > Apps > Custom Apps > click the ⚙ icon
Required actions
To see what steps an Admin must complete for a given app, review the following scenarios.
Disable published apps by default:
Authentication Method | Enabled | Disabled |
---|---|---|
OAuth 2.0 | Set to available in individual app controls | Ready for use |
Server Authentication (with JWT) | N/A | N/A |
Server Authentication (client credentials) | N/A | N/A |
App Token Authentication | N/A | N/A |
Disable unpublished apps by default:
Authentication Method | Enabled | Disabled |
---|---|---|
OAuth 2.0 | Enable in Apps > Custom Apps Manager > User Authentication Apps > Add App | Ready for use |
Server Authentication (with JWT) | Authorize and enable in Apps > Custom Apps Manager > Server Authentication Apps > Add App | Authorize in Apps > Custom Apps Manager > Server Authentication Apps > Add App |
Server Authentication (client credentials) | Authorize and enable in Apps > Custom Apps Manager > Server Authentication Apps | Authorize in Apps > Custom Apps Manager > Server Authentication Apps > Add App |
App Token Authentication | Authorize and enable in Apps > Custom Apps Manager > Server Authentication Apps > Server Authentication Apps > Add App | Ready for use |
Require manual admin authorization for transactional access apps:
Authentication Method | Enabled | Disabled |
---|---|---|
OAuth 2.0 | N/A | N/A |
Server Authentication (with JWT) | N/A | N/A |
Server Authentication (client credentials) | N/A | N/A |
App Token Authentication | Authorize in Apps > Custom Apps Manager > Server Authentication Apps | Automatically authorized and enabled upon creation |