Application management
|
The topics in this section are for tenants created on or after January 12, 2023. Learn more in Application management migration FAQ. |
In Advanced Identity Cloud, an application is an object that represents an external service you want to connect to. This service might be a popular cloud-based application (such as Salesforce or Workday), a directory service (such as LDAP or Active Directory), or your own custom-built application.
You can configure an application for two main functions:
-
Provisioning: Automates the creation and management of user accounts in external applications.
-
Single sign-on (SSO): Lets end users access external applications using their Advanced Identity Cloud credentials. Through standard protocols such as OpenID Connect (OIDC), SAML, or WS-Federation, users authenticate once with Advanced Identity Cloud and can access applications without reentering credentials. Sometimes, these protocols also let users consent to delegated access, enabling applications to act on their behalf within approved scopes.
Applications are therefore comprehensive objects. They can also include authorization, authentication, and identity management policies.