Identity information linking
A system, method, and computer-readable media for linking identify information between a group-based communication system and an external application based on a user authorization to share credentials. After sharing the user's credentials, the user may be authenticated with the external application and user data from the group-based communication system may be shared with the external application. Additionally, a preview of a web resource associated with the external application may be displayed to the user within the group-based communication system allowing the user to interact with the web resource from within the group-based communication system.
1. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, perform a method for linking identity information between a first application and an external application, the method comprising:
detecting a user engagement with an external application resource associated with the external application from within the first application, wherein the external application is distinct from the first application, wherein the user is not logged into a user account associated with the external application when the engagement is received;
in response to detecting the engagement with the external application resource determining whether the user has previously authorized credential sharing with the external application;
in response to determining that the user has not previously authorized the credential sharing with the external application, prompting the user to share authentication credentials with the external application;
in response to detecting user approval, sending the authentication credentials to the external application;
in response to determining that the user is authenticated by the external application, providing the user access to the external application resource requiring the user to log into the external application user account; and
in response to determining that the user is not authenticated by the external application, creating and provisioning the external application user account for the user based on the authentication credentials, wherein the provisioning of the external application user account can be retroactively rescinded.
2. The computer-readable media of claim 1 , the method further comprising:
in response to creating and provisioning the external application user account, notifying an administrative user of the external application user account.
3. The computer-readable media of claim 1 , the method further comprising, in response to detecting user approval, storing confirmation that the user has authorized credential sharing with the external application.
4. The computer-readable media of claim 1 , wherein the external application requires that the user be logged into the user account associated with the external application to access the external application resource.
5. The computer-readable media of claim 1 , the method further comprising:
receiving a revocation request from the user; and
revoking access from the external application to the authentication credentials based on the revocation request.
6. The computer-readable media of claim 1 , wherein a subsequent engagement with the external application resource in the first application, after the user has authorized credential sharing with the external application, does not prompt the user to share authentication credentials with the external application.
7. A method for linking identity information between a first application and an external application, the method comprising:
detecting a user engagement with an external application resource associated with the external application from within the first application, wherein the external application is distinct from the first application, wherein the user is not logged into a user account associated with the external application when the engagement is received;
in response to detecting the engagement with the external application resource, determining whether the user has previously authorized credential sharing with the external application;
in response to determining that the user has not previously authorized the credential sharing with the external application, prompting the user to share authentication credentials with the external application;
in response to detecting user approval, sending the authentication credentials to the external application;
in response to determining that the user is authenticated by the external application, providing the user access to the external application resource requiring the user to log into the external application user account; and
in response to determining that the user is not authenticated by the external application, creating and provisioning the external application user account for the user based on the authentication credentials, wherein the provisioning of the external application user account can be retroactively rescinded.
8. The method of claim 7 , further comprising:
in response to creating and provisioning the external application user account, notifying an administrative user of the external application user account.
9. The method of claim 7 , further comprising, in response to detecting user approval, storing confirmation that the user has authorized credential sharing with the external application.
10. The method of claim 7 , wherein the external application requires that the user be logged into the user account associated with the external application to access the external application resource.
11. The method of claim 7 , further comprising:
receiving a revocation request from the user; and
revoking access from the external application to the authentication credentials based on the revocation request.
12. The method of claim 7 , wherein a subsequent engagement with the external application resource in the first application, after the user has authorized credential sharing with the external application, does not prompt the user to share authentication credentials with the external application.
13. A system for linking identity information within a first application, the system comprising:
a data store; and
a server associated with the first application including a processor and one or more non-transitory computer-readable media storing instructions that, when executed by the processor, perform a method for linking identity information between the first application and an external application, the method comprising:
detecting a user engagement with an external application resource associated with the external application from within the first application, wherein the external application is distinct from the first application, wherein the user is not logged into a user account associated with the external application when the engagement is received;
in response to detecting the engagement with the external application resource, determining whether the user has previously authorized credential sharing with the external application;
in response to determining that the user has not previously authorized the credential sharing with the external application, prompting the user to share authentication credentials with the external application;
in response to detecting user approval, sending the authentication credentials to the external application;
in response to determining that the user is authenticated by the external application, providing the user access to the external application resource requiring the user to log into the external application user account; and
in response to determining that the user is not authenticated by the external application, creating and provisioning the external application user account for the user based on the authentication credentials, wherein the provisioning of the external application user account can be retroactively rescinded.
14. The system of claim 13 , further comprising:
in response to creating and provisioning the external application user account, notifying an administrative user of the external application user account.
15. The system of claim 13 , further comprising, in response to detecting user approval, storing confirmation that the user has authorized credential sharing with the external application.
16. The system of claim 13 , wherein the external application requires that the user be logged into the user account associated with the external application to access the external application resource.
17. The system of claim 13 , further comprising:
receiving a revocation request from a second user; and
revoking access from the external application to the authentication credentials based on the revocation request.