From d1f3f499426fc265cc066c686999202dff2db178 Mon Sep 17 00:00:00 2001 From: Daniela Merlo Date: Fri, 29 May 2026 16:31:22 -0300 Subject: [PATCH 1/4] W-22513829-authorization-error-eme-dm --- modules/ROOT/pages/exp-home-start.adoc | 3 ++ modules/ROOT/pages/exp-troubleshoot.adoc | 56 ++++++++++++++++++++++++ 2 files changed, 59 insertions(+) diff --git a/modules/ROOT/pages/exp-home-start.adoc b/modules/ROOT/pages/exp-home-start.adoc index c4d21c2d..6f13d197 100644 --- a/modules/ROOT/pages/exp-home-start.adoc +++ b/modules/ROOT/pages/exp-home-start.adoc @@ -37,6 +37,9 @@ Access and Credentials:: + * Confirm that you have a user account for your organization's entry path, such as Anypoint Platform, and valid credentials to log in. * Confirm that you can reach the new experience and integrated services, such as Anypoint Platform, or a connected coding assistant, from the networks and locations you use. ++ +[NOTE] +If your organization has set the Connected App Authorization Policy to *restricted*, an organization administrator must add the MuleSoft Omni app to the allowlist before users can access the Enhanced Experience. This is a one-time action per organization. See xref:exp-troubleshoot.adoc#cant-authorize-app-error-for-organizations-with-restricted-connected-app-policy["Can't Authorize App" Error] for details. Platform and Product Access:: + diff --git a/modules/ROOT/pages/exp-troubleshoot.adoc b/modules/ROOT/pages/exp-troubleshoot.adoc index 14b979b0..34322f59 100644 --- a/modules/ROOT/pages/exp-troubleshoot.adoc +++ b/modules/ROOT/pages/exp-troubleshoot.adoc @@ -65,6 +65,62 @@ Some actions require specific service states (such as active or registered). Some features might be in preview or require specific product access. .. Ask your administrator about feature availability if needed. +[[cant-authorize-app-error-for-organizations-with-restricted-connected-app-policy]] +=== "Can't Authorize App" Error for Organizations with Restricted Connected App Policy + +If you see a "Can't Authorize App" error when attempting to access the Enhanced MuleSoft Experience: + +. Identify the error: ++ +The error message displays: ++ +---- +Can't Authorize App +Mulesoft Omni - US → [Your Organization Name] + +Mulesoft Omni - US wants to access your [username] account in the [Organization Name] organization. + +As an admin, you can add this app to the allowlist for your organization. +---- ++ +The dialog includes a button labeled *Go to add the app to allowlist* and a link to *Sign in with Another Account*. + +. Understand the cause: ++ +This error occurs when your organization's *Connected App Authorization Policy* is set to *restricted*. ++ +.. By default, newly created organizations have this policy set to *unrestricted*, which allows users to access connected apps without additional approval. +.. When the policy is set to *restricted*, it indicates that an organization administrator has intentionally configured this security setting to control which connected apps can access organizational data. +.. This restricted policy takes precedence over any application allowlisting configured on the MuleSoft side. ++ +For more information about Connected App Authorization Policies, see xref:access-management::connected-apps-org-admin.adoc#configure-authorization-policies[Configure Authorization Policies]. + +. Contact your organization administrator: ++ +Only an *organization administrator* can resolve this issue. Regular users cannot add apps to the allowlist. ++ +.. Inform your administrator that the MuleSoft Omni app needs to be added to your organization's allowlist. +.. Provide them with the error message screenshot if helpful. + +. Administrator resolution steps: ++ +If you are an organization administrator: ++ +.. When the "Can't Authorize App" error appears, click the *Go to add the app to allowlist* button. +.. Complete the authorization flow to add MuleSoft Omni to your organization's allowlist. +.. This is a *one-time action* that applies to the entire organization. ++ +After completing this step, all users in the organization will be able to access the Enhanced MuleSoft Experience without encountering this error. + +. Verify resolution: ++ +If you continue to experience issues after your administrator has added the app to the allowlist: ++ +.. Clear your browser cache and cookies. +.. Verify that you're signed in with the correct organizational account. +.. Confirm that your network connectivity to `omni.mulesoft.com` is functioning properly. +.. Contact your organization's Anypoint Platform administrator for additional assistance. + == Connection Failures Connection failures prevent you from connecting providers, running scanners, or accessing external systems. From 8280f7ae139574b9812b04bec807bc5a9271806a Mon Sep 17 00:00:00 2001 From: Daniela Merlo <97902112+dmerlob@users.noreply.github.com> Date: Fri, 29 May 2026 16:43:47 -0300 Subject: [PATCH 2/4] Update modules/ROOT/pages/exp-troubleshoot.adoc --- modules/ROOT/pages/exp-troubleshoot.adoc | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/modules/ROOT/pages/exp-troubleshoot.adoc b/modules/ROOT/pages/exp-troubleshoot.adoc index 34322f59..cff6383e 100644 --- a/modules/ROOT/pages/exp-troubleshoot.adoc +++ b/modules/ROOT/pages/exp-troubleshoot.adoc @@ -68,7 +68,7 @@ Some features might be in preview or require specific product access. [[cant-authorize-app-error-for-organizations-with-restricted-connected-app-policy]] === "Can't Authorize App" Error for Organizations with Restricted Connected App Policy -If you see a "Can't Authorize App" error when attempting to access the Enhanced MuleSoft Experience: +If you see a "Can't Authorize App" error when attempting to access the enhanced MuleSoft experience: . Identify the error: + @@ -90,27 +90,27 @@ The dialog includes a button labeled *Go to add the app to allowlist* and a link This error occurs when your organization's *Connected App Authorization Policy* is set to *restricted*. + .. By default, newly created organizations have this policy set to *unrestricted*, which allows users to access connected apps without additional approval. -.. When the policy is set to *restricted*, it indicates that an organization administrator has intentionally configured this security setting to control which connected apps can access organizational data. +.. When the policy is set to *restricted*, it indicates that your administrator has intentionally configured this security setting to control which connected apps can access organizational data. .. This restricted policy takes precedence over any application allowlisting configured on the MuleSoft side. + For more information about Connected App Authorization Policies, see xref:access-management::connected-apps-org-admin.adoc#configure-authorization-policies[Configure Authorization Policies]. -. Contact your organization administrator: +. Contact your administrator: + -Only an *organization administrator* can resolve this issue. Regular users cannot add apps to the allowlist. +Only an administrator can resolve this issue. Regular users can't add apps to the allowlist. + .. Inform your administrator that the MuleSoft Omni app needs to be added to your organization's allowlist. .. Provide them with the error message screenshot if helpful. . Administrator resolution steps: + -If you are an organization administrator: +If you are an administrator: + .. When the "Can't Authorize App" error appears, click the *Go to add the app to allowlist* button. .. Complete the authorization flow to add MuleSoft Omni to your organization's allowlist. .. This is a *one-time action* that applies to the entire organization. + -After completing this step, all users in the organization will be able to access the Enhanced MuleSoft Experience without encountering this error. +After completing this step, all users in the organization will be able to access the enhanced MuleSoft experience without encountering this error. . Verify resolution: + From a346d9a0cb52f4fc57194a140d7a7b7c5352110b Mon Sep 17 00:00:00 2001 From: Daniela Merlo <97902112+dmerlob@users.noreply.github.com> Date: Fri, 29 May 2026 16:43:54 -0300 Subject: [PATCH 3/4] Update modules/ROOT/pages/exp-home-start.adoc --- modules/ROOT/pages/exp-home-start.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/ROOT/pages/exp-home-start.adoc b/modules/ROOT/pages/exp-home-start.adoc index 6f13d197..17040b82 100644 --- a/modules/ROOT/pages/exp-home-start.adoc +++ b/modules/ROOT/pages/exp-home-start.adoc @@ -39,7 +39,7 @@ Access and Credentials:: * Confirm that you can reach the new experience and integrated services, such as Anypoint Platform, or a connected coding assistant, from the networks and locations you use. + [NOTE] -If your organization has set the Connected App Authorization Policy to *restricted*, an organization administrator must add the MuleSoft Omni app to the allowlist before users can access the Enhanced Experience. This is a one-time action per organization. See xref:exp-troubleshoot.adoc#cant-authorize-app-error-for-organizations-with-restricted-connected-app-policy["Can't Authorize App" Error] for details. +If your organization has set the Connected App Authorization Policy to *restricted*, an administrator must add the MuleSoft Omni app to the allowlist before users can access the enhanced experience. This is a one-time action per organization. See xref:exp-troubleshoot.adoc#cant-authorize-app-error-for-organizations-with-restricted-connected-app-policy["Can't Authorize App" Error] for details. Platform and Product Access:: + From a225f352706c92bbdf3ff022fc9e932a57e9451f Mon Sep 17 00:00:00 2001 From: Daniela Merlo Date: Fri, 29 May 2026 16:58:05 -0300 Subject: [PATCH 4/4] w-22513829-edits --- modules/ROOT/pages/exp-troubleshoot.adoc | 17 +---------------- 1 file changed, 1 insertion(+), 16 deletions(-) diff --git a/modules/ROOT/pages/exp-troubleshoot.adoc b/modules/ROOT/pages/exp-troubleshoot.adoc index cff6383e..d54c9ec6 100644 --- a/modules/ROOT/pages/exp-troubleshoot.adoc +++ b/modules/ROOT/pages/exp-troubleshoot.adoc @@ -70,21 +70,6 @@ Some features might be in preview or require specific product access. If you see a "Can't Authorize App" error when attempting to access the enhanced MuleSoft experience: -. Identify the error: -+ -The error message displays: -+ ----- -Can't Authorize App -Mulesoft Omni - US → [Your Organization Name] - -Mulesoft Omni - US wants to access your [username] account in the [Organization Name] organization. - -As an admin, you can add this app to the allowlist for your organization. ----- -+ -The dialog includes a button labeled *Go to add the app to allowlist* and a link to *Sign in with Another Account*. - . Understand the cause: + This error occurs when your organization's *Connected App Authorization Policy* is set to *restricted*. @@ -118,7 +103,7 @@ If you continue to experience issues after your administrator has added the app + .. Clear your browser cache and cookies. .. Verify that you're signed in with the correct organizational account. -.. Confirm that your network connectivity to `omni.mulesoft.com` is functioning properly. +.. Confirm that your network connectivity is functioning properly. .. Contact your organization's Anypoint Platform administrator for additional assistance. == Connection Failures