DynamicForm Start free trial

Company Admin

Set sign-in for your company

Choose how people sign in and which applications connected systems may reach.

Company administrators manage these settings in Company administration. Sign-in belongs to the company, while API clients can reach only the applications chosen for them.

Use your company identity

Connect the identity service your people already use. DynamicForm supports OpenID Connect, Microsoft Entra ID and SAML 2.0 for company single sign-on. Your company administrator controls the connection for your company.

End users sign in at the company's web address before opening their applications. Shared sign-in keeps the company identity together as you add applications. Application access still follows roles, so signing in does not grant access to every application.

On Android, single sign-on opens in the phone's secure browser. Authenticator codes also work on the phone.

Choose the second check

Set two-factor policy to off, company administrators only, or everyone. The policy belongs to the company rather than an individual application.

Use an authenticator app for the second check. Sign-in policy answers how people enter; their roles determine the functions and application work they can reach.

Only company administrators manage single sign-on, two-factor policy and API clients. Giving a colleague a separate administration function does not make them a full company administrator.

Limit connected systems

Register an API client for a system that calls into DynamicForm. Choose the applications that client may reach.

For example, a connection used for Purchase Requests can be limited to that application. Company administrators manage these clients from the shared administration area.

Integration definitions also belong to the company, with application scope controlling where designers may use them. Integration scope limits application use of a connection, while an API client's scope limits the applications a calling system may reach.

Review sign-in activity

Company administration includes one-time password settings, labelled OTP settings, and OTP logs. API call logs provide a place to review calls into the company.

Use the relevant log when investigating a question about sign-in or a connected system. Review it alongside the settings that apply to that activity.

For wider access decisions, review the role's Permissions, Application access and Data scope together. Explore users, roles and permissions to see how they work together.

Updated 30 October 2026