How to Manage Custom Apps in OnePlan

Direct Answer: How to Manage Custom Apps in OnePlan

To manage Custom Apps in OnePlan, select your profile avatar, choose Register Custom Apps, and use the inline actions available on each Custom App registration in the list. For Custom Apps you created, you can Edit, Rotate secret, or Revoke. For Custom Apps enabled through the Browse App Registrations panel, you can Remove Consent.

What This Article Covers: Manage Custom Apps

This article explains how to update, maintain, and decommission Custom App registrations in OnePlan.

What you will accomplish

• Edit an existing Custom App registration
• Rotate a Client Secret
• Revoke a Custom App registration you created
• Remove Consent for a Custom App enabled through the Browse App Registrations panel

Before You Begin: Manage Custom Apps

• You must be a group administrator in OnePlan
• You must be working in the correct group context
• For Edit, Rotate secret, and Revoke, you must be the group that created the Custom App registration

Why This Matters: Manage Custom Apps

Context: Inline Actions Per Registration

All enabled Custom App registrations appear in the Custom App Registrations list. The actions available for each Custom App registration depend on whether your group created it or enabled it through the Browse App Registrations panel.

Context: Credential Security

Rotating secrets regularly and revoking unused Custom App registrations reduces security risk. OnePlan cannot recover a lost secret — Rotate secret is the only way to regain access after a secret is lost or exposed.

Step-by-Step: Manage Custom Apps

Task: Open Custom App Registrations

1. Select your profile avatar in the top navigation.
2. Select Register Custom Apps.

The Custom App Registrations list displays all Custom App registrations enabled for your group, including Application Name, Scope, Registered By, Client ID, Secret, PKCE, and Created date.

Task: Edit a Custom App Registration

Use Edit to update the name, callback URLs, or PKCE setting of a Custom App registration you created.

1. Select Edit (pencil icon) on the Custom App registration you want to update.
2. Update any of the following:
   • Application Name
   • Callback URL(s)
   • Require PKCE
3. Select Update.

Note: Scope cannot be changed after a Custom App registration is created. If you need a different scope, create a new Custom App registration.

Task: Rotate the Client Secret

Use Rotate secret if a Client Secret may have been exposed or as part of your credential rotation policy.

1. Select Rotate secret on the Custom App registration.
2. Select Yes.
3. Copy the new Client Secret from the Custom App Credentials modal.

Important: The previous Client Secret stops working immediately. Update your integration configuration before closing the modal — the new secret cannot be retrieved again.

Task: Revoke a Custom App Registration

Use Revoke to permanently disable a Custom App registration your group created. All integrations using this Custom App's Client ID will stop working immediately.

1. Select Revoke (trash icon) on the Custom App registration.
2. Confirm the action.

Warning: Revoke is permanent and cannot be undone. Create a new Custom App registration if the integration needs to be restored.

Task: Remove Consent

Use Remove Consent to stop your group from using a Custom App enabled through the Browse App Registrations panel. This does not affect other groups that have added the same Custom App, and it does not delete the underlying Custom App registration.

1. Select Remove consent on the Custom App registration.
2. Confirm the action.
   
   

Frequently Asked Questions: Manage Custom Apps

What is the difference between Revoke and Remove Consent?

In OnePlan, Revoke permanently disables a Custom App registration your group created — all integrations using that Client ID stop working immediately. Remove Consent only removes the Custom App from your group; the Custom App registration remains active for other groups that have enabled it.

Can I undo a Revoke?

No. In OnePlan, Revoke is permanent. If the integration needs to be restored, create a new Custom App registration and update your integration with the new credentials.

What happens to other groups when I Revoke an Organization-scoped Custom App?

In OnePlan, revoking an Organization-scoped Custom App registration disables it entirely. Other groups that have enabled the Custom App will also lose access. Contact those groups before revoking a shared Custom App registration.

Can I change the Scope of an existing Custom App registration?

No. In OnePlan, Scope cannot be changed after a Custom App registration is created. Create a new Custom App registration with the desired scope if needed.

What can I edit on an existing Custom App registration?

In OnePlan, you can update the Application Name, Callback URL(s), and Require PKCE setting. Scope and Client ID cannot be changed.

What to Do Next: Manage Custom Apps

Get started with related tasks

• How to Register a Custom App in OnePlan
• How to Enable a Custom App in OnePlan

Learn about related topics

• What are Custom Apps in OnePlan?