Manage Authentication and Security
Manage sign-in methods
Before configuring SSO or another sign-in method, retain at least one working administrator sign-in path and verify the configuration with a test account.
Authentication Center
Ops tenant administrators can configure WinNexo account sign-in for trusted applications in System Management → Authentication and Security → Authentication Center.
Click New Application, select its tenant, enter the application details and callback URL, and save. Each application belongs to one tenant, and only that tenant's members can authorize sign-in. The callback URL must exactly match the URL used by the integrating application.
View the Client ID and endpoint URLs in application details. The integrating application must store the Client Secret on its server. Configure sign-in using the Discovery, Authorize, Token, Userinfo, and Introspect endpoints. Use credentials and URLs from the environment being integrated.
Test sign-in with an account belonging to the application's tenant. Disabling an application prevents further authorization and invalidates issued access tokens. Resetting the Secret invalidates the old Secret immediately; update the integrating application's configuration promptly.
This integration lets trusted applications verify user identity. It does not grant permission to call WinNexo OpenAPI on the user's behalf.
Audit logs
In Audit Logs, search system management operations by tenant, operator, and time.
To combine conditions, click Advanced Search and configure them. Use AND to require all conditions or OR to match any condition, then click Search. For example, combine operation source and business type to narrow the logs you need to investigate.