MaxIAM: sign-in for other apps
MaxIAM: sign-in for other apps
MaxIAM lets other apps sign people in with their MaxSuite account. The app learns who the person is (name and email) and nothing else. It gets no access to your data.
MaxIAM sits at the foot of the sidebar for platform administrators given the Platform: sso right. Everyone else sees "Only a platform administrator can manage sign-in for other apps."
What you see
- Apps: the apps that send people here to sign in. Connecting a MaxShield registers it here on its own.
- Live sign-ins: sign-ins other apps can use right now. The newest hundred are shown.
- Sign-out notices: messages sent to apps when a person signs out, so they sign out there too.
What you can do
Register an app by hand
- Press Register an app.
- Give its name and the address people are sent back to.
- Copy the Client secret. It is shown once.
Let an app enrol itself
An app can ask to be registered. Someone presses Connect to MaxSuite in that app, and a platform administrator lands on An app wants to sign people in with MaxSuite. The page shows:
- the app's name and the id it asks for,
- the address it lives at, and where people are sent back to.
Allow only if you, or someone you trust, just pressed Connect to MaxSuite in that app. If the app is already registered, allowing again gives it a new secret and the old one stops working. If something is wrong with the request, the page says why and cannot be approved.
End a sign-in
End a live sign-in from the list. If an app missed a sign-out notice, send it again.
Who can do what
| What | Who |
|---|---|
| See and manage apps, sign-ins and notices; approve an enrolment | a platform administrator given Platform: sso |
For agents
The core offers core.listSsoClients, core.listSsoSessions, core.endSsoSession, core.listSsoLogouts, core.redriveSsoLogout and core.setBackchannelLogoutUrl.