Workflow credentials
Credentials used in workflows and Sidekick AI skills are stored using monday.com’s recently added “Workflow credentials” feature.
Workflow credentials are a way to allow access to a remote app such as Microsoft 365 from within monday.com. This mechanism is entirely owned and performed by monday.com, and so abstracts the complicated work away from third-party developers. User credentials are stored securely by monday.com themselves, and third-parties are only given a short-lived expiring token for accessing external systems.
Which features of monday.com can use workflow credentials?
Which OAuth permissions are required for the app?
How to revoke access to Microsoft 365
Currently, there appears to be no self-service way for an individual user, or all users in the account.
If you need to revoke your credentials and have the data deleted from monday.com infrastructure, please email support@monday.com.
Revoking access for individual users
TODO Video of, and link to, any official monday.com documentation on deleting the data stored for workflow credentials when available.
Revoking access for all users in the account
TODO Video of, and link to, any official monday.com documentation on how an admin can delete the data stored for workflow credentials for all users in an account when available.
Further reading
https://developer.monday.com/apps/docs/manage-user-tokens-and-credentials – Developer focused documentation on setting up and using workflow credentials
TODO Link to any official monday.com documentation on workflow credentials