Devices
Description
The Devices view lets you approve a sign-in from a desktop or in-document adapter (for example the Word add-in or the LibreOffice adapter) and manage the device sessions you have authorized. The view is reached from the account menu at the bottom of the left sidebar → Devices (route /device). Every signed-in role can open the view.
A device that wants to sign in shows a short device code (format XXXX-XXXX). You enter that code on this page, check what the device asks for, and approve or deny it. Approving lets the device act as you on the named gateway until its token expires or you revoke it.
The view has two cards:
- Authorize a device — enter a device code and decide on the request.
- Your device sessions — the devices you have authorized, each with a Revoke button.
The protocol behind the flow (endpoints, request shapes, token lifetimes) is described in Device-code authentication.
Approving a device
Before you begin, ensure the following conditions are met:
- ☑ The device shows a device code.
- ☑ The device asks for a gateway of your own workspace.
Proceed as follows to approve a device:
- Open Devices from the account menu. If the device opened the page for you with a link that contains the code, the Device code field is already filled in.
- Enter the code shown on the device in the Device code text field.
- Click on the Continue button.
- The page shows Checking the code…, then the request: the Gateway and the Device name.
- Check that you started this sign-in yourself and that the gateway is correct.
- Click on the Approve button. To refuse the request, click on the Deny button instead.
-> With Approve, the page shows Device approved and the device can finish signing in. With Deny, the page shows Device denied and the device gets no access. Click on Verify another device to enter a further code.
⚠️ Caution: Approve only a request that you started yourself. An approved device acts as you on the gateway.
When the code is not accepted
| Message | Meaning | What to do |
|---|---|---|
| No matching request | No pending request matches the code. | Check the code and enter it again. |
| Request no longer available | The request expired or was already handled. | Start the sign-in on the device again. |
| Too many attempts | Too many codes were tried. | Wait a moment, then try again. |
| Cannot approve | Your account is not allowed to approve device access. | Ask your administrator. |
| Different workspace | The device asks for a gateway of another workspace. You can approve devices only for gateways of your own workspace. | Use an account of that workspace. |
| Self-service tokens disabled | Your workspace has turned off self-service tokens, so you cannot approve device access yourself. | Ask a workspace admin to enable self-service tokens. |
If the code cannot be checked or the decision cannot be sent, the page shows The device code could not be checked. or Your decision for this device could not be sent. Try again.
Revoking a device session
Proceed as follows to revoke a device session:
- Locate the device in the Your device sessions card. Each row shows the device name (or Unlabeled device), the Gateway, and the Authorized date.
- Click on the Revoke button in the row.
- A confirmation dialog opens with the prompt Revoke this device session? The device will need to sign in again.
- Confirm the dialog with Revoke.
-> The page shows Device session revoked. The device must sign in again. If the session was already gone, the page shows That session was already gone.
When you have no authorized device, the card shows No active device sessions. If the list cannot be loaded, it shows Your device sessions could not be loaded.