Domain integration: The Essentials

If your app users are all part of a corporate domain, you can use domain security groups to control access to an AppSheet app.

The advantage of this approach is that access control decisions can be made globally rather than in each app. For example, if there is a domain security group called Admins, you can set up your app to only be accessible to members of this group. As specific employees are added or removed from the group, their access to the app dynamically changes as well.

Using domain groups requires an enterprise plan. Further, the app creator account needs to have permissions to read the list of groups from the domain and to read the membership of individual groups.

View authorization domains in your AppSheet account

  1. Sign in to AppSheet.
  2. Go to My account > Integrations > Auth Domains.

The Auth Domain pane shows your personal and team auth domains. See also Share integrations with your team.

Auth Domains pane showing personal and team authorization domains in your account

Add an authorization domain to your AppSheet account

By adding an auth source, you are giving AppSheet permissions to read the list of groups and the group membership for any domains that your account has access to.

To add an authorization domain to your AppSheet account:

  1. Sign in to AppSheet.
  2. Go to My account > Integrations > Auth Domains.
  3. Click + New Auth Domain
    The Add a new authentication domain dialog displays.
  4. Enter a name for the auth source.
  5. Select one of the following auth sources from the list:
  6. Respond to the prompts to authenticate access.

 Set up domain authentication in an app

To set up domain authentication in an app:

  1. Open an AppSheet app and navigate to Security > Domain Authentication.
  2. Enable Require domain authentication? 
  3. Under Authentication domain source select the name of the account added in the previous step.
  4. Restrict access by domain by entering a domain name in the Restrict by Domain field.
    This field is optional. If set, only members of the groups whose domain matches this field will be permitted to access the app with the specified role. If left empty, all members of the group, regardless of the domain, will be able to access the app with the specified role.
  5. Add Authentication groups that will be used to manage user authentication for this app and perform one or more of the following tasks:
    • Change the App role to User or Admin. For information about leveraging the user role in your app, see USERROLE(). The role defaults to User.
    • Change the App version available to the user to Default, Latest, or Stable. For information about app versions, see Maintain a stable app version.
  6. Save your changes.

Set up domain authentication in an app on the Security > Domain Authentication tab

 

 

Was this helpful?
How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
false