Team management and SSO

Issues & Ideas
1

We are trying to transition our team from Linear to Workflowy

We are building the automations to sync with Github and Slack and that works great.

Our issue is the management of team access, today there is no central place to manage access to all Nodes under our shared team.

  1. We can’t use SSO to manage logins and access
  2. We can manage access per node. I haven’t found a way to get all the users who have access to a node of any of the nodes inside it

The idea is to easy see who has access to what and if someone is not in the team any longer, an easy process to remove their access from all Nodes.

Would love to hear how others are doing it

2

Hey Uri, thanks for sharing that. Could you share what you were thinking about with regards to team access / management? Beyond SSO I mean.

1 Like
3

Hi! I’m work with Uri, just dropping my thoughts and our needs:

  • SSO - either with SAML or OIDC - we use Okta so it covered by both. The main goal is to offload the identity management to our external instance.
  • Provisioning - really optional but nice to have, in order to have users created/removed by the identity provider.

Alternatively, if SSO and full external auth is not available, just having a way to limit user domains per workspace would be a great start - so we can use Login with Google and then scope it to our domain. In addition, having API to manage users would be great, so we can do our own thing for provisioning to sync user access.

4

Hey dotan thanks for that followup, really appreciate the extra details about your team’s needs.

1 Like
5

One other thing I wanted to share was permission management.

If I understand it correctly, today permissions can be only managed per Node and there is not an API to share permissions of Nodes.

That means that if we now want to make sure someone doesn’t have access to a specific Node, including all of its children, we can’t really do that.

We can remove them from the parent Node but we can’t know if they also have permissions to some hidden child node