How do I remove a Oauth2 App from my tenant in Lucid

Hello Tony,

I have two interpretations of your question; hopefully one is correct:

• The OAuth2 APP is owned by the third-party vendor’s account and they added you as a collaborator to get access.
  • If thats that case, you can remove yourself as a collaborator and it will be removed from the list. (Image below)
• The OAuth2 APP was created by your account to provide to the third party vendor.
  • Unfortunately, deleting an application is not currently supported. I have passed this discrepancy on to our internal teams for consideration.

Hi Michael,

The app was created during a setup of a third-party platform called Zluri which was supposed to monitor and report on our license consumption for multiple products not just Lucid, I am not sure how it was setup but it was so the Zluri platform could get the license information from Lucid.

I will attach some screen shots of what I see

Also to note we received a email from Lucid recently which stated All legacy OAuth2 clients have been moved to the developer section, which is what drew our attention to this still being active.

I enabled Developer tools on my profile and had me added to the role of developer in hopes to then be able to delete the Zluri App but to no avail.

Mant Thanks

Tony Orchard
 

Thanks Tony, that helps pin down the scenario. 

We can use that information to de-publish it for you. This will ensure that nobody but you can actually generate a token using that client. You will see the `Published Privately` moniker disappear.

As mentioned, deleting the application entirely is not currently supported. But, I have noted this thread as a party that is interested and will reach out here if that changes.

On second look, is your name in the list of Collaborators? I may have misread it and all you need to do is remove yourself. Be sure to check the tabs if you don’t see it.

Morning Michael

I removed myself and now it has disappeared from My Applications, but will this not be still there for the other users in the list, and if so how do we remove if for the whole org?

Just found this in the admin portal settings, so I have asked the account owner to check if they can still see the app and unpublish it.

Update

I had the account owner go into the app they were able to remove all other people in the list except themselves, which gets us most of the way there I guess but they still had no option to unpublish or remove the app.

Is the application owned by your account, or was it another account that created it? I ask because we can unpublish it for you, but wouldn’t want to unless the account that owned it intended to.

Initially setup the integration between Zluri and Lucid but that was a year ago and was following their documentation, this is something we definitely do not need anymore and from a security point of view need to remove, so could you proceed with unpublishing the ABB Zluri app on our behalf.

If you need authorization from the Account Owner let me know and I can arrange it as they are the manager asking for this to be removed.

Thanks Tony,

I am investigating un-publishing it now and apologize in the delay for what must seem like a straight forward request. From my side, I need to do due diligence to ensure that there are no unintended side effects that have not been considered. I will be in touch soon.

For maximum security in the meantime, you can advise the Account Owner to reset the secret and remove any authorized redirect URLs. That will ensure that nobody can generate a token with that client if they somehow have access. (assuming that has not already been done)