Allow access

The consent screen an application shows before it can see your account, and what Allow and Deny do.

On this page

When an application asks to sign you in and to see parts of your account, you decide first. The screen is titled Allow access, and its heading names the application: Allow followed by the application's name, then to access your account? Below it the screen says It will be able to see what you allow below.

You see this screen when the application is one that needs your permission and you have not already given it for what it is asking for. Applications that TDACorp runs as part of the platform itself do not ask. If you allowed an application before and it asks for nothing new, the screen is skipped.

What the screen shows#

The application's name and logo, at the top.
A badge. Verified application means TDACorp has verified the application. This application is not verified by TDACorp. means it has not, so take more care before you allow it. An application that is known only by a web address, with no registration at TDACorp, also shows the line It is identified only by its web address: followed by that address. Check that it is the site you expect. Applications can be identified this way only where the platform has turned on the oauth_cimd flag, which defaults to OFF.
A list under This application is asking for. Each line is one thing the application wants to see or do, in plain words.
Two buttons: Deny and Allow.
Where the application supplied them, links to its Privacy policy and Terms of service, which open in a new tab.

The Allow access screen for an application called Playground app that TDACorp has not verified: a required item to confirm who you are, three optional items that are ticked, and Deny and Allow buttons. — Allow access: what the application asks for, and Deny or Allow. Sample data./sign-in

Required and optional items#

Some lines are marked Required. Those cannot be unticked, because the application cannot sign you in without them. The sign-in itself is always one of them.

Lines that are not marked Required are shown as checked boxes. You can untick any of them before you select Allow. The application then gets only what remains ticked. The words of each line come from the scope the application asked for, shown in the language of the page for the common ones: Confirm who you are, Your name and preferences, Your email address, Stay signed in and Your organization. Any other scope shows the description TDACorp holds for it. The scopes are listed in Scopes.

Allow#

Select Allow to let the application continue with what is ticked. Your choice is remembered, so the screen does not come back the next time that application asks for the same things. The sign-in then carries on, and you are sent back to the application; see How a sign-in ends in another application.

Deny#

Select Deny to refuse. Nothing is shared with the application. You are sent back to it with a message that access was denied, and it decides what to show you.

Changing your mind later#

Allowing is not permanent. In your account, Apps and access lists the applications you have allowed, and you can revoke any of them. See Connected applications. An application that has been revoked asks again the next time you sign in to it.

What can go wrong#

What you see	What it means
This sign-in has ended	The sign-in took too long, or was already finished. Select Start a new sign-in, or start again from the application.
An application you do not recognise asks for access	Select Deny. Check the badge, and read the list of what it wants.