M7 Identity Organizations

Manage members with clear boundaries.

A robot host welcomes two groups of people and robots in separate amber and blue entry lanes.

Group people into organizations and manage who belongs to each one. Keep membership and access organized, with clear boundaries between the teams and customers your app serves.

Overview

M7 is built for multi-tenancy: one identity system can serve several organizations, with membership and access managed for each one. Organizations are a first-class part of M7's identity model, with their own members, applications and credentials. Use an organization to represent a customer, company or team. Your app can serve several organizations and use the relevant organization when it checks who belongs and what they can do.

Organization management

Manage an organization's members and resources through M7's tools. Create client applications, manage API keys, and decide who can own or administer the organization. Flexible ownership and management rules let you assign responsibility to the people who need it. Keep applications, credentials and administrative work associated with the organization they belong to.

Groups and sign-in

Divide an organization's members into groups for teams, departments or other parts of your operation. Assign members to groups or move them as their responsibilities change. Use group membership to limit who can sign in through a particular login page. For example, a login page for your support team can be restricted to members of its support group. Members can use the sign-in methods configured for that experience, including passwords and supported linked providers such as GitHub. Group rules determine who can use the login page; M7 handles the account's sign-in process.

Automation

Manage groups and members programmatically with authorized machine tokens. Add or remove users, update group assignments, and change passwords through the APIs, within the permissions granted to your integration. Connect these operations to your own onboarding, offboarding or administration workflows. Your software decides when an action is needed, and M7 carries out the permitted account or membership operation. This lets you adapt user management to the way your product works.