Connect an approved project
Register separate staging and production clients. Keep local roles in your application and synchronize workforce eligibility.
Production access is reviewed
A named owner, exact callback URLs, approved scopes, lifecycle handling and rollback procedure are required. Anonymous client registration is disabled.
Choose an integration profile
Managed workforce: OIDC, local authorization, lifecycle synchronization, freshness enforcement and back-channel logout. Required for first-party applications.
Standard OIDC: Approved third-party applications with documented and accepted logout and revocation limitations.