If the people who work with you already have a Kamo account in another organization — a parent company, a franchise group, a partner — they can sign in to your organization with that same account. This is called a Kamo-to-Kamo trust. It works like any other identity provider, except there is nothing to copy or paste: Kamo connects the two organizations for you once both sides agree.
You need the Manage Identity Providers permission. The other organization's administrator needs Manage Connected Apps to approve.
Let Members Of Another Kamo Organization Sign In
Open Settings, then Security, choose Identity & Sign-In, then Identity Providers, and press Add An Identity Provider. Pick Another Kamo Organization.
Nothing changes for anyone until the other organization approves and you turn the connection on.
Choose The Organization
Type at least two letters of the organization's name or short name. Only organizations that have turned on sign-in for other apps appear (in their Connected Apps); your own never does. Pick one — its card shows a check mark.
Ask Them To Trust You
Press Ask … To Trust You. Kamo sends the other organization's app administrators a notification, and a request appears in their Connected Apps. The connection's card shows Waiting For Approval.
Waiting For Their Approval
The setup window shows where the request stands and checks again every few seconds; Check Now asks right away. You can close the window and come back later with Continue Setup.
- Approved — Kamo has connected the two organizations. Continue to match up the details, run a test sign-in and choose who signs in this way, exactly as for any other provider. See Set Up Single Sign-On.
- Declined — the other organization chose not to. Remove the connection, or talk to its administrators and ask again.
When a member signs in this way, it is the same Kamo account they already use. If they aren't a member of your organization yet, Kamo adds them with that account when New People is on; otherwise they are refused until you add them.
Approve A Trust Request
If you run the other side: open Settings, Security, Identity & Sign-In, then Connected Apps. A request shows the asking organization's name and waits for you. Approve lets your members sign in to that organization with their account here; Decline turns it away. The app's access settings still decide which of your members may use it.
Kamo keeps the connection's secret itself — nobody on either side ever sees or types it, so there is nothing to rotate.
When A Trust Ends
The organization that approved can turn the app off or remove it at any time. When it does, your connection turns off by itself, its card says Trust Ended, and your members sign in their usual way (password, passkey or another provider). Removing your connection also removes the app on the other side.