Bring your own app registrations

By default, people connect their tools through OneTaskList’s own app registrations and are up and running immediately. Instead you can register the apps in your own admin centres. Then the OAuth app your people approve is yours, it appears in your own audit trail, and revoking it cuts OneTaskList off from that tool without involving us.

• One Microsoft Entra ID app covers Outlook mail, Outlook calendar, Microsoft To Do, OneNote, Planner and SharePoint.
• One Atlassian app covers Jira and Confluence.
• Azure DevOps, Slack, GitHub, GitLab, Trello, Asana, ClickUp, Monday.com, Todoist, Dynamics 365 and Altus each take their own.

1. Tell us which tools you want to own. We send you the redirect URIs for each one.
2. Register the apps in your admin centres and grant the scopes we list.
3. Send us the client IDs and secrets. We store them in your region’s Key Vault, and they are never written into configuration files or logs.

• Rotating a secret: create the new one, send it to us, and we swap it in. Remove the old one once connections are working.
• Revoking an app: connections to that tool stop working at once and people see them as needing re-authorisation. Nothing already imported is deleted.
• A secret that expires without a replacement has the same effect, so send us the new one before the old expires.

You do not have to own every app. Bring your own for the tools that matter most to you, for example Microsoft and Jira, and use ours for the rest.