Restrict access to your Applaud platform using API and domain API keys

Procedures

To integrate with Workato, you need to allow access to a couple of IP addresses. See their help article, IP allowlists.

Add a new API key

1. On the Admin home page, select API keys.
2. On the Keys page, on the API Keys block, select ADD.
3. In the API key dialog box, type in a Title for your API key. For example, "HR platform."
4. Optionally, to add a logo to your API key, under Logo, select UPLOAD. Find the image you want to use.
5. Under the Restrictions section, to enter the URLs of the application, select HTTP referrer, or to enter IP addresses of the application, select IP addresses.
   • HTTP referrer (websites)
     1. In the Referrer box, enter the full URL of the application that you want to allow access to data on your Applaud tenant.
     2. To add another URL to the application, select the plus icon.
   • IP addresses
     1. In the Address box, enter the IP address of the application that you want to allow access to data on your Applaud tenant.
     2. To add another IP address, select the plus icon.
6. Select SAVE.

Add a new domain API key

You can set multiple API keys to impose your own key rotation. When access is blocked, users see an HTTP page that contains the message: "Access to this site is blocked outside your company network."

1. On the Admin home page, select API keys.
2. On the Keys page, on the Domain Keys block, select ADD.
3. In the Domain API key dialog box, type in a Title for your API key. For example, "Your company name."
4. Optionally, to add a logo to your API key, under Logo, select UPLOAD. Find the image you want to use.
5. Select SAVE.
6. To block access to the tenant unless the custom header value matches at least one of the active organization API keys, select Enable. When enabled, access is blocked when trying to access via a custom domain or the sub-domain.
7. To deactivate this key, select Disable.

See more:

• About API keys

Reference:

• Keys page