Connected apps: let other apps use your Kaam360 account

A connected app is a program made by your organization or by someone else (a phone app, a calendar, a reporting tool) that you allow to work with your Kaam360 account. It works as you: it can only see and do what your own role allows, and only the kinds of things you said yes to. It can never delete anything, manage people or change settings. This is part of the Business package.

Connect an app

1. In the app, choose to connect it to Kaam360 (for example Sign in with Kaam360). The app sends you to Kaam360.
2. Sign in if you are asked to.
3. Kaam360 shows which app is asking, who makes it, the organization you are signed in to, and what it will be able to do, for example See tasks and their comments in your projects or Log time for you.
4. Press Allow to connect it, or Cancel to say no. Either way you go back to the app.

See and disconnect your apps

1. Press your name at the top right and choose My connected apps.
2. You see each app you allowed, what it can do, when you connected it and when it was last used.
3. Press Disconnect to stop an app at once. It then has to ask you again before it can do anything.

For administrators: Settings > Connected apps

People with the right Manage connected apps open Settings and choose Connected apps.

• Apps people connected lists every connection in your organization: the app, the person, what it may do and when it was last used. Search by app or person, sort by any column, press Export for a spreadsheet, and press Disconnect to stop any connection.
• Your organization's apps: press Register an app to add an app your organization builds or buys. Give it a Name, who it is Made by, the Return addresses (where people are sent back after pressing Allow, one per line) and the Access it may ask for. Choose Runs on a server for an app that can keep a secret, or Phone, desktop or browser app for one that cannot.
• After registering, copy the Client id and, for a server app, the Client secret. The secret is shown only once. Give both to the app's developer. The developer guide explains the rest to them.
• Use Edit to change an app, New client secret if the secret may have leaked (the old one stops at once), Switch off to stop the app for everyone for a while, Disconnect everyone to make everyone allow it again, and Remove (press twice) to delete it with every connection.

Who may do what

• Connect apps to their account: Administrators and Managers have it at first. Give it to another role under Roles & rights when its people need apps. Take it away from a role and the apps of people in that role stop working.
• Manage connected apps: registering apps and disconnecting anyone's. Administrators have it, and so does every role that could manage integrations.
• Everything is written to the Activity log: who connected or disconnected which app, new apps and secrets, and a warning when a stolen token was used.

Good to know

• Apps get a token that works for one hour and a refresh token that works once. If someone ever uses an old refresh token again, Kaam360 assumes it was copied and stops that connection.
• Each app may make a limited number of requests a minute, so one app cannot slow Kaam360 down for everyone.
• If a person is switched off or their workspace is suspended, their apps stop at once.
• If your organization lets people use Kaam360 only from approved networks (under Security), apps working for your people must use those networks too.
• An app can set up webhooks only for what its person may read and allowed it to see. When the app is disconnected, those webhooks are removed.
• AI tools such as Claude, ChatGPT and Cursor show here as AI tools (MCP). See Connect AI tools to Kaam360 (MCP).