Skip to main content
WeCom and WPS are organization-scoped identity integrations. Every organization stores its own CorpID/AppID and application secret, so enterprise identity namespaces are never shared across organizations. Owners and Admins can configure them in Cloud or self-hosted deployments without a plan gate.

​
Connect an enterprise application

Open Personal settings → Organization → Enterprise integrations, then choose WeCom or WPS:
  • WeCom requires a CorpID, AgentID, and Secret;
  • WPS requires an AppID and AppKey;
  • a secret is required for the first connection, is never displayed afterward, and may be left blank on later saves to retain it;
  • a saved CorpID/AppID cannot be edited in place. Disconnect before switching enterprises.
The detail page shows the callback URL and organization-specific login link. Register the callback with the enterprise application, then share the login link with organization members.
The entry point looks like /login/sso/wecom?org_id=... or /login/sso/wps?org_id=.... It binds login to an organization; it is not an invitation and never auto-joins a new member.

​
Select members to import

Click Import members to load the application’s currently visible users. Search by name or external UID, filter by status, and select individuals; imported and deactivated members cannot be selected. The dialog shows the current limit, remaining seats, and how many seats the selection requires. On submit, the server reloads visibility and capacity. If a user is no longer visible, their status changed, or capacity is insufficient, the entire batch is rejected and the candidates are refreshed. A successful import is add-only:
  • a new external identity creates a global User and tenant-scoped credential, then joins this organization as a Member;
  • an identity already known in the same tenant reuses its User, while an active membership and role remain unchanged;
  • a deactivated membership is not reactivated;
  • removing someone upstream does not automatically deactivate them in AskTable;
  • additions are subject to the organization member limit.
Only pre-imported members with an active User and active membership in this organization can use the link. First enterprise login never provisions a member. Organization discovery, domain discovery, and SCIM are not included.
A User with only a WeCom/WPS credential and no email credential cannot create an organization or become its Owner. An ownership-transfer target must already have an email credential.

​
Disconnect

Disconnecting removes only this organization’s integration configuration. Existing Users, external credentials, memberships, projects, and historical content remain, but the organization’s enterprise login entry stops working immediately. Reconnecting the same enterprise and importing again can reuse those identities. Deployment-level Google, GitHub, WeChat, and email login are configured separately; see Deployment authentication.