Application configuration - SuperOffice

Authentication

Setting	Description	How-tos	Read more
Allowed postLogout redirect URLs	Context-specific URLs that will be called by the browser after successful sign-out a user.	Add or update	Endpoint types
Allowed redirect URLs	Context-specific URLs that will be called by the browser after successful sign-in or when a user clicks one of the available buttons on your application entry.	Add or update	About redirects and CORS
Authorize	The description shown in the concent dialog when the admin is prompted to approve the application.	Get consent, Add or update text	About consent
Certificates	RSA encryption keys	Create new certificate, Sign system user token	SuperID certificates
Client ID	Uniquely identifies the application. Assigned automatically and unique per environment - you cannot edit it manually, but you can regenerate it.	Find client ID	Terminology
CORS URLs		Add or update	About redirects and CORS
Is native or mobile app	Type if application. OAuth2 Native App flow if checked.	Create native app	OAuth2 Native app flow
Secrets	The application token (password). Must be supplied when invoking any of the SuperOffice CRM Online web services.	Create new client secret	Terminology

Redirection and CORS URLs must be listed one per line.

Integration settings

Setting	Description	How-tos	Read more
Customer state change endpoint	URL SuperOffice can push notifications to you when a tenant change status (off/on)	Manage notifications	About tenant status
ERP sync	For integration with an ERP system.	Create sync app	ERP connector API
Mirroring	For local processing when real-time data is not the most important consideration.		About mirroring
Quote connector		Create sync app	Quote connector API

For each of the above:

Endpoint URL, off/on
Send error emails. If checked, the person listed as technical contact for the app will receive error emails.

Advanced

These settings except “Support dark mode” and “Remove remember me” must be changed by the app manager.

Setting	Description	How-tos	Read more
Support dark mode	Enables dark mode browser setting for the Online Login page.
Remove remember me	Whether the Remember me checkbox should be visible on the login page.
Access to (agents)	These agents are restricted in our Online environment. A custom app may get access to CRMScript agent.
Access to (claims)	Returned in the JWT as claims - for server-to-server apps we tick SystemToken
Authorization level	All apps will get Administrator by default in SOD. Custom applications will be changed to Explicit when published to production.	Request to publish
Custom claims	In addition to the SuperOffice claims.
Default redirect URL	Used by legacy authentication - add all needed redirect URLs to your apps allowed list.	Add or update	Endpoint types
Supported endpoints	Endpoints the application can connect to.	Update endpoints	What API to use

Claims:

InternalNetserverUrl
SystemToken
PersonId
FeatureToggles
MinimumPocketVersion

Agents:

User
ErpSync
Replication
Email
Messaging
MailLink
Webhook
CRMScript
Data
Ai
Pocket
Dash
DocumentMigration

See also