Okiff

Okiff is a role-based administration console for your organization's identity servers, and it lives in the Chrome side panel so it stays open beside the work it manages. Everyone signs in with the work account they already have. What each person can see and do is decided entirely by the roles that account holds — Okiff grants nothing of its own. THREE LEVELS OF ACCESS - For everyone See the applications your account gives you access to, and open any of them straight from the panel. - For enterprise administrators Manage your own organization and nobody else's: • Create, edit and remove users, and manage their credentials • Organize people into permission groups and departments • Grant or revoke access to individual applications, per user or per group • Register applications and configure their scopes and token mappings - For super administrators Manage the whole state: every enterprise on the server, the applications registered to each one, and the people within them. -For resources federation Applications are set up for single sign-on through the extension. Because your session is already established when you sign in to Okiff, opening an application from the panel signs you straight into it — no second login, no re-entering your password. If the application is already open in a tab, Okiff brings you to that tab instead of opening a duplicate. PRIVACY BY DESIGN Okiff talks to one server: your company 's own identity server. Nothing is sent to us, and nothing is sent to any third party. • No content scripts. It cannot read, change or inject anything into the web pages you visit. • It does not read your browsing history or your cookies. • It contains no analytics, telemetry, tracking or advertising code. • Your password is typed into your identity server's own login page, opened in a separate Chrome window. Okiff never sees it. Sign-in uses the OAuth 2.0 authorization code flow with PKCE, run through Chrome's built-in identity service. Full privacy policy: https://okiff.com/privacy COMING SOON An application marketplace, so administrators can browse and add new applications to their companies or organizations directly from the panel. REQUIREMENTS An account on an identity server your company operates, and Chrome 114 or later for side panel support.