End user authorization

After you successfully

  • registered an application for Token Vault in a cloud provider, and
  • registered an Authorization Provider in Token Vault for your selected cloud,

users need to log in to Token Vault and authorize on the Token Vault Available authorization providers page.

To authorize, they need to:

  1. Open a browser and enter the Token Vault URL in the browser's address bar. For example, https://testmachine.testdomain.com:8381.

    This URL must be communicated to users by the administrator for example in email, so that they can perform this step.

  2. Enter their windows User name in DOMAIN\USERNAME format and their Password.
  3. Click Log in.

    After successful login, the available Authorization Providers are displayed.

  4. Click Authorize for the selected authorization provider.

    The browser redirects them to the login page of the cloud belonging to the selected authorization provider.

  5. Log in with their cloud account and grant access to the application.

    The browser directs them back to Token Vault displaying the authorization success dialog.

  6. Click Close to finish authorization.

Once the authorization is complete, users can do the following:

  • Revoke authorization: Click Revoke authorization for the selected authorization provider and then click Revoke on the confirmation dialog.
  • Re-authorize with a different cloud account: Click Reauthorize for the selected authorization provider and then perform the required authorization steps again.

Important If the administrator modifies the permissions of an Microsoft 365 application configured for Token Vault after some users have already authorized the Microsoft 365 Authorization provider connected to this Microsoft 365 application, the users must perform the authorization steps again to get a new token which is valid for the modified permissions. The administrator can force this reauthorization by removing the tokens belonging to this Microsoft 365 Authorization provider on the Manage tokens page in Token Vault.