access-control

Stock OIDC and the M7 path

Same authorization server, two profiles: stock OpenID Connect by default, and opt-in bindings, ACK, and DPoP when the threat is loss or replay.

By The Grim Scalper · Tags: m7 , identity , sso , apis , operators , documentation , access-control

People, machines, and tenants

M7 does not flatten the world into one user table. People, machines, and tenants are different principals — that is the product, not a footnote.

By The Grim Scalper · Tags: m7 , identity , tenants , sso , operators , access-control , platform , user.m7

SSO Groups Give Hosted Apps a Front Door

M7 OAuth applications can now use organization-scoped groups to enroll new members, admit the right accounts, and stop refresh tokens from outliving access changes.

By The Grim Scalper · Tags: m7 , platform , identity , sso , groups , tenants , access-control