Workflow credentials
Credentials used in workflows and Sidekick AI skills are stored using monday.com’s recently added “Workflow credentials” feature.
Workflow credentials are a way to allow access to a remote app such as Microsoft 365 from within monday.com. This mechanism is entirely owned and performed by monday.com, and so abstracts the complicated work away from third-party developers. User credentials are stored securely by monday.com themselves, and third-parties are only given a short-lived expiring token for accessing external systems.
Which features of monday.com can use workflow credentials?
Which OAuth permissions are required for the app?
How to revoke access to Microsoft 365
Currently, there appears to be no self-service way for an individual user, or all users in the account from within monday.com.
If you need to revoke your credentials and have the data deleted from monday.com infrastructure, please email support@monday.com.
Revoking access for individual users
In monday.com: Video of, and link to, any official monday.com documentation on deleting the data stored for workflow credentials when available. TODO - WHEN POSSIBLE
In your Microsoft 365 account: You can revoke access at any time from your Microsoft 365 account settings under Connected apps and services. Revoking access will prevent the app from accessing your data moving forward.
Revoking access for all users in the account
In monday.com: Video of, and link to, any official monday.com documentation on how an admin can delete the data stored for workflow credentials for all users in an account when available. TODO - WHEN POSSIBLE
In your Microsoft 365 account: Admins can revoke this app’s access at any time from the Azure portal by removing the Enterprise Application, disabling sign-in, or revoking granted permissions under Microsoft Entra ID.
Further reading
https://developer.monday.com/apps/docs/manage-user-tokens-and-credentials – Developer focused documentation on setting up and using workflow credentials
Link to any official monday.com documentation on workflow credentials TODO - WHEN POSSIBLE