Unclassified

OneAuth Identity & Connection Architecture

Centralized credential management, token refresh, and tenant authorization.

Overview

OneAuth provides unified authentication for all connected services in IntegrateWise. Users authenticate once with each upstream provider (Salesforce, Zendesk, Slack, Jira, GitHub), and OneAuth manages:

  • Token Lifecycle: Automatic refresh of OAuth 2.0 access and refresh tokens.
  • Tenant Isolation: Secure, per-tenant encrypted credential storage using Cloudflare Secrets and AES-256-GCM.
  • Scope Negotiation: Fine-grained capability scoping ensuring external services can only read or write within authorized bounds.
  • Audit Trails: Every credential access and delegation event is logged to immutable receipts.