Trust Relationships and Permissions

What are Trust Relationships and Trust Permissions?

Trust Relationship:

• This is a source of truth: Select this option for all your sources of truth which have some of your Identities. This is typically HR applications or enterprise Active Directory applications.

• Recipient only (most SaaS apps): Apps like Zoom, or Salesforce, which do not act as a source of identities. This is a common selection for most SaaS applications. This will be the only option available for most SaaS applications.

Trust Permission:

• Read Only: The application is only permitted to read the data from the application connection, no data is ever written back to the source.

• Read + Provision/De-provision Entitlements (No User Creation): Clarity is permitted to read information from the source as well as adding or removing access to Entitlements when users are hired or terminated, but will not create new Users in your applications.

• Read + Provision/De-provision Entitlements and Users: Clarity is permitted to read information from the source as well as adding or removing access to Entitlements when users are hired or terminated, and will create new Users in your applications where applicable.

• Write: Similar to Read + Provision/Deprovision above, however Clarity can also write Attributes back to the source.

Need help?