Scopes per App
Scopes can be requested by an app or automatically assigned. Some endpoints within the Identity Hub require a scope to be present for the external app in order to be allowed.
Configure scopes used by an App
- Navigate to the Apps list (https[]//://www.theidentityhub.com/{tenant}/Admin/App) of your Tenant and select the application you want to configure. If you don't have a Tenant yet, you can register one for free.
- Click the app for which you want to edit the applicable scopes.
- On the left side click Scopes.
- Check the scopes you want to make available for the application. Optionally: automatically assign a scope to an app even when not requested.
- Click Save.
Configure an app to use a specific scope required by The Identity Hub
For an app it is possible to use existing endpoints on The Identity Hub. However some require a specific scope to be present. See Scopes used by The Identity Hub
For instance, the Sharepoint claimprovider featured by The Identity Hub targets several endpoints to find information on an identity.
If you have a SharePoint app you will need to configure the required scope (tih_searchusers).
To configure the scope as required
- Create the necessary scope within your tenant.
- Assign the scope (automatically) to the related app.