M7.org · News · Tag
security
17 articles
-
A valid token still needs permission
A token identifies the caller. The receiving service decides what that caller can do, using principal lists, role policy and current permission checks.
-
One team identity, only the facts an app needs
Reuse an organization identity across products while keeping shared facts, membership and each product’s access decisions distinct.
-
One hosted sign-in, several presentations
Choose a full page, popup or embedded sign-in experience around your app, with a dependable route back to the task.