Managing security > Creating and editing account access > Editing OAuth account access
 

Editing OAuth account access

For files hosted by FileMaker Server or FileMaker Cloud for AWS, users can be authenticated via OAuth identity providers such as Amazon, Google, or Microsoft. This allows you to control access to your files through third-party identity providers and may allow access to additional security measures, such as multifactor authentication, which requires more than one method of authentication.

Note  Although you can set up account access for OAuth identity providers in FileMaker Pro, only files hosted by FileMaker Server or FileMaker Cloud for AWS can authenticate users via an OAuth identity provider. Files shared by any other FileMaker host can’t authenticate via an OAuth identity provider.

To create or edit OAuth identity provider account access:

1. Start editing new or existing account access for an OAuth identity provider user or group in the Manage Security dialog box.

See Creating and editing account access.

2. For Authenticate via, choose Amazon, Google, or Microsoft Azure AD.

3. To grant account access to a user or group, click New. To change an existing account access entry, select the user or group.

 

To

Do this

Grant access to a user

Microsoft Azure AD: For Group or User, choose User.

Enter the User Name for the account defined by the OAuth identity provider.

Grant access to a Microsoft Azure AD group

For Group or User, choose Group. Then enter the Group Name (Object ID) defined by the OAuth identity provider.

4. For Privilege Set, choose, create, or edit a privilege set.

See Creating and editing privilege sets.

The privilege set assigned to this account access determines what the OAuth identity provider user or group can do in the file.

5. To make the account active, select its checkbox.

Make account access inactive, for example, to set up privilege sets before allowing users to sign in.

6. Microsoft Azure AD: If you grant access to multiple groups or users, you may need to change the priority of account access.

See Changing the priority of account access.

Notes 

You’ll need to set additional options in Admin Console for FileMaker Server or FileMaker Cloud for AWS to authenticate users via an OAuth identity provider. See FileMaker Server Help or FileMaker Cloud for AWS Help in the Product Documentation Center.