Onboarding checklist
Before opening a support request
These checks resolve most first-week integration issues and give support the context needed to help quickly.
Tenant registration completed and administrator can sign in.
Application exists under the expected organization and has the expected application key.
InteractiveWeb client redirect URIs match the app exactly, including scheme, host, port, and path.
Automation client credentials are stored outside source control and use only approved scopes.
JWT validation uses discovery metadata and JWKS instead of hard-coded signing keys.
Marketplace or device issues include product, edition, entitlement, activation, and membership identifiers where applicable.
Escalation paths
Route the issue by rollout stage
Use the narrowest support path that matches the current blocker.
Onboarding
Tenant, app, or client setup
Use this path when registration, application creation, client provisioning, redirect URI setup, or first sign-in fails.
- Include tenant slug, organization ID, application key, client purpose, and redirect URI.
- Attach the exact error message and timestamp.
Production
Security review or launch readiness
Use this path for JWKS validation, deployment posture, tenant isolation, audit retention, webhook delivery, and evidence questions.
- Start with the Trust Center and Getting Started validation checklist.
- Include environment, deployment model, and required review timeline.
Advanced features
Marketplace, device trust, enterprise setup
Use this path when product installation, seat assignment, activation, offline lease, OIDC provider, or SCIM setup needs review.
- Include product, edition, entitlement, activation, provider, or SCIM connection identifiers.
- Call out whether the issue affects GA functionality or a preview boundary.