Connecting an app

Connectors have two steps, and they belong to different people.

1. The organisation enables the app

Some apps require organisation-level approval before anyone can sign in to them — typically the ones where your company’s own identity provider governs access. Until that is done, users see a note on the card telling them to ask you.

2. The user signs in to it

The actual connection is made by each person, with their own account, in the app’s own sign-in window. Kuumba never holds their password for that app, and it never sees more than that person’s own account can reach.

This is deliberate: a connector cannot become a shortcut around the permissions the app itself enforces.

A connector is a standing grant

It keeps working until the user disconnects it or you revoke it. Include connected apps in your leaver checklist — removing the Kuumba account is the reliable way to end them all at once.

What to tell your users

• Connect only what you actually use.
• Approving an action Kuumba asks about is a real action in the real app.
• Disconnect anything you stop needing, from Applications.