Documentation

Console

Assignments

Assignment is the grant. A member may open an application when Everyone is set, their member row is assigned, or one of their roles is assigned. Admins can start every enabled app. No assignment means no token and no SAML assertion.

Targets

  • Everyone — every active member.
  • Role — members who have that role.
  • User — one member.

Console uses the same chip and dropdown language as Users and Blueprint. Assigned apps appear automatically in the filtered collection as sso_… tiles. Members can still rename or restyle those tiles in their overlay. Tiles are not stored on the Blueprint.

Assignments are Enterprise-only. Other plans hide the menu and reject the APIs with 403 PLAN_REQUIRED. Expired or over-seat organizations return 402 before a launch. Roles used as assignment targets must be active (canView). See Roles.

Owner API

GET    /api/developer/teamspaces/:id/sso/assignments
POST   /api/developer/teamspaces/:id/sso/apps/:ssoAppId/assignments
DELETE /api/developer/teamspaces/:id/sso/assignments/:assignmentId

POST body is exactly one of { "everyone": true },{ "memberId": "…" }, or { "nodeId": "…" }.