- People sign in with your company’s identity provider before a request reaches the app. People outside the audience never reach it.
audienceisorg, onegroup:<name>, a list of groups, orpublic. A public app needs IT approval before Publish.rolesmaps app roles to groups. The owner can also give roles to people in the console.- The app receives signed identity headers with the person’s email, name, groups and roles. It must not write login code or add a sign-in bypass.
- Preview and Beta are always limited to the builder and the people they invite.
Capabilities
Sign-in (SSO)
Company sign-in in front of your app, with no login code.