# \#multipass

**URL:** https://community.palantir.com/tag/multipass/16.md

[Latest](https://community.palantir.com/latest.md) · [Categories](https://community.palantir.com/categories.md) · [Tags](https://community.palantir.com/tags.md)

---

## [Deactivate users](https://community.palantir.com/t/deactivate-users/5328)

<div class="topic-metadata">

**Author:** [@JSW](https://community.palantir.com/u/JSW)\
**Replies:** 5\
**Last updated:** [October 14, 2026, 3:17pm UTC](https://community.palantir.com/t/deactivate-users/5328 "2026-10-14T15:17:09Z")

</div>

Is there a way to programmatically remove a user from all Multipass groups? What’s the recommended ‘offboarding’ flow for Foundry instances that are managed through Azure SSO? – More info – Our deployment is integrate…

---

## [User-delegated authentication from a Custom Widget to an external system](https://community.palantir.com/t/user-delegated-authentication-from-a-custom-widget-to-an-external-system/6983)

<div class="topic-metadata">

**Author:** [@JohnR73](https://community.palantir.com/u/JohnR73)\
**Replies:** 1\
**Last updated:** [July 22, 2026, 7:18pm UTC](https://community.palantir.com/t/user-delegated-authentication-from-a-custom-widget-to-an-external-system/6983 "2026-07-22T19:18:52Z")

</div>

Hi, I’m investigating how to preserve individual user identity when a Foundry Custom Widget triggers operations in an external system. Users authenticate to Foundry through enterprise SSO. The external system has its o…

---

## [\[FR\] Workflow Identity Federation](https://community.palantir.com/t/fr-workflow-identity-federation/6968)

<div class="topic-metadata">

**Author:** [@nicornk](https://community.palantir.com/u/nicornk)\
**Replies:** 1\
**Last updated:** [July 21, 2026, 11:28am UTC](https://community.palantir.com/t/fr-workflow-identity-federation/6968 "2026-07-21T11:28:48Z")

</div>

Note: AI helped to formulate the text but the content is 100% curated by a human Feature Request: Workload Identity Federation for Foundry Multipass 1. Problem Statement Today, any automated workload that needs to call…

---

## [Read-only access to role set definitions](https://community.palantir.com/t/read-only-access-to-role-set-definitions/254)

<div class="topic-metadata">

**Author:** [@jtreloar](https://community.palantir.com/u/jtreloar)\
**Replies:** 1\
**Last updated:** [May 23, 2024, 11:32am UTC](https://community.palantir.com/t/read-only-access-to-role-set-definitions/254 "2024-05-23T11:32:44Z")

</div>

How to allow a user to have read-only access to role sets. I would like to grant a user read-only access to the role definitions for role sets in my Foundry tenant. This is to enable them to understand what operations …

---

## [Fine-Grained Personal Tokens](https://community.palantir.com/t/fine-grained-personal-tokens/6051)

<div class="topic-metadata">

**Author:** [@nicornk](https://community.palantir.com/u/nicornk)\
**Replies:** 0\
**Last updated:** [February 20, 2026, 7:31am UTC](https://community.palantir.com/t/fine-grained-personal-tokens/6051 "2026-02-20T07:31:43Z")

</div>

Hi, from security perspective it would be a huge benefit if personal tokens can be restricted to certain operations (=scopes) or restricted to certain resources (e.g. compass projects) within the platform. A workaround…

---

## [User Activity Session](https://community.palantir.com/t/user-activity-session/228)

<div class="topic-metadata">

**Author:** [@diana](https://community.palantir.com/u/diana)\
**Replies:** 3\
**Last updated:** [May 9, 2025, 12:03pm UTC](https://community.palantir.com/t/user-activity-session/228 "2025-05-09T12:03:26Z")

</div>

Can we change the length of time a user’s session stays active (i.e. how long before foundry logs them out and requires re-authentication)? I found these docs (https://www.palantir.com/docs/foundry/security/single-sign-…

---

## [Test User Creation](https://community.palantir.com/t/test-user-creation/1665)

<div class="topic-metadata">

**Author:** [@samir.unni](https://community.palantir.com/u/samir.unni)\
**Replies:** 1\
**Last updated:** [October 28, 2024, 3:38pm UTC](https://community.palantir.com/t/test-user-creation/1665 "2024-10-28T15:38:24Z")

</div>

How can I create a test user? I’m an org admin for the enrollment. I don’t see this button on the MP user admin page: (screenshot is from the docs)

---

## [Can I disable role grants on Users?](https://community.palantir.com/t/can-i-disable-role-grants-on-users/5437)

<div class="topic-metadata">

**Author:** [@aszekely](https://community.palantir.com/u/aszekely)\
**Replies:** 1\
**Last updated:** [November 13, 2025, 2:12am UTC](https://community.palantir.com/t/can-i-disable-role-grants-on-users/5437 "2025-11-13T02:12:56Z")

</div>

Hello, I would like to implement a restriction where only groups can be granted roles on Projects. I want to avoid specific users being made Editor / Viewer / etc. Best, Aron

---

## [Alert Workflow for Token Expiration](https://community.palantir.com/t/alert-workflow-for-token-expiration/1084)

<div class="topic-metadata">

**Author:** [@nGemo](https://community.palantir.com/u/nGemo)\
**Replies:** 3\
**Last updated:** [February 14, 2025, 10:55am UTC](https://community.palantir.com/t/alert-workflow-for-token-expiration/1084 "2025-02-14T10:55:34Z")

</div>

I want to build an alert workflow that will remind and inform our users of when their user tokens that they’ve initiated in Settings → Tokens-\>Create New Token. Is there an API endpoint or similar process I can leverage…

---

## [Username collisions by realm](https://community.palantir.com/t/username-collisions-by-realm/1064)

<div class="topic-metadata">

**Author:** [@nsweeney](https://community.palantir.com/u/nsweeney)\
**Replies:** 1\
**Last updated:** [August 19, 2024, 1:53pm UTC](https://community.palantir.com/t/username-collisions-by-realm/1064 "2024-08-19T13:53:41Z")

</div>

Am I correct that username collisions can only happen within the same realm? ie, if a user is getting a “Cannot complete login for your user with provider ID and username XYZ because the username XYZ is already being us…

---

## [No "Log out" option when we have default page setup](https://community.palantir.com/t/no-log-out-option-when-we-have-default-page-setup/4396)

<div class="topic-metadata">

**Author:** [@RajKarri](https://community.palantir.com/u/RajKarri)\
**Replies:** 1\
**Last updated:** [July 4, 2025, 4:43pm UTC](https://community.palantir.com/t/no-log-out-option-when-we-have-default-page-setup/4396 "2025-07-04T16:43:24Z")

</div>

We have some users who have access to only one workshop app and access was not given to other apps. Basic functionality is working as expected. But, these users are facing a couple of issues. They do not see “Log out”…

---

## [Unable to add a new passkey](https://community.palantir.com/t/unable-to-add-a-new-passkey/4135)

<div class="topic-metadata">

**Author:** [@RajKarri](https://community.palantir.com/u/RajKarri)\
**Replies:** 1\
**Last updated:** [June 7, 2025, 3:30pm UTC](https://community.palantir.com/t/unable-to-add-a-new-passkey/4135 "2025-06-07T15:30:49Z")

</div>

It’s stuck in re-authentication page when I tried to add a new passkey. I was pushed back to home screen instead of successful reauthentication. It’s kind of stacking window on top of window when I continued.

---

## [Can I pre-register users in bulk?](https://community.palantir.com/t/can-i-pre-register-users-in-bulk/1468)

<div class="topic-metadata">

**Author:** [@tanmayb](https://community.palantir.com/u/tanmayb)\
**Replies:** 1\
**Last updated:** [October 8, 2024, 7:51pm UTC](https://community.palantir.com/t/can-i-pre-register-users-in-bulk/1468 "2024-10-08T19:51:15Z")

</div>

If I have a list of users and their emails (in a csv, for example), can I pre-register them in one go instead of one at a time? I’m using the ‘Pre-register’ button on the top right when on Platform Settings \> Users.

---

## [Disabling user discoverability within an organization](https://community.palantir.com/t/disabling-user-discoverability-within-an-organization/2786)

<div class="topic-metadata">

**Author:** [@jackmiller2003](https://community.palantir.com/u/jackmiller2003)\
**Replies:** 4\
**Last updated:** [February 5, 2025, 3:01am UTC](https://community.palantir.com/t/disabling-user-discoverability-within-an-organization/2786 "2025-02-05T03:01:51Z")

</div>

Hi, I’d like to remove the capacity for users within the same organization from seeing each other. This is important for a production version of my use case since we might have all users within the same organization but…

---

## [Ontology Value Formatting for Multipass GroupId](https://community.palantir.com/t/ontology-value-formatting-for-multipass-groupid/2671)

<div class="topic-metadata">

**Author:** [@Flackermann](https://community.palantir.com/u/Flackermann)\
**Replies:** 2\
**Last updated:** [February 2, 2025, 1:37pm UTC](https://community.palantir.com/t/ontology-value-formatting-for-multipass-groupid/2671 "2025-02-02T13:37:24Z")

</div>

Hi, for a specific usecase, we would like to enable our users to share data with other groups of users by modifying granular permissions via edits by adding group Ids to relevant columns defined in restricted views. Th…

---

## [\[Typescript\] Get user custom SAML attributes](https://community.palantir.com/t/typescript-get-user-custom-saml-attributes/2476)

<div class="topic-metadata">

**Author:** [@jimbo](https://community.palantir.com/u/jimbo)\
**Replies:** 3\
**Last updated:** [January 10, 2025, 11:53am UTC](https://community.palantir.com/t/typescript-get-user-custom-saml-attributes/2476 "2025-01-10T11:53:10Z")

</div>

Hello community, In our project we pass some custom attributes using SAML and I’m trying to get them using the getUserById built-in function in TypeScript. I got some attributes but none of the one I’m passing during th…

---

## [Easy question regarding Markings: what is the difference between a black and a white marking](https://community.palantir.com/t/easy-question-regarding-markings-what-is-the-difference-between-a-black-and-a-white-marking/2148)

<div class="topic-metadata">

**Author:** [@Uli](https://community.palantir.com/u/Uli)\
**Replies:** 1\
**Last updated:** [December 10, 2024, 10:36am UTC](https://community.palantir.com/t/easy-question-regarding-markings-what-is-the-difference-between-a-black-and-a-white-marking/2148 "2024-12-10T10:36:16Z")

</div>

In my account \>\> settings \>\> markings I can see a lot of markings, however, some are black and some are white. What is the difference here? The overview of my requested data accesses shows no open requests. Thus, all da…

---

## [No one has administrative permissions to manage aspects of this category](https://community.palantir.com/t/no-one-has-administrative-permissions-to-manage-aspects-of-this-category/1112)

<div class="topic-metadata">

**Author:** [@haavard](https://community.palantir.com/u/haavard)\
**Replies:** 1\
**Last updated:** [August 22, 2024, 5:32pm UTC](https://community.palantir.com/t/no-one-has-administrative-permissions-to-manage-aspects-of-this-category/1112 "2024-08-22T17:32:21Z")

</div>

Hello, We have a marking category in Foundry where the category permissions have somehow become “No one has administrative permissions to manage aspects of this category”: Not sure how we ended up here. How can we re…

---

## [What determines ability to view group membership?](https://community.palantir.com/t/what-determines-ability-to-view-group-membership/998)

<div class="topic-metadata">

**Author:** [@chi](https://community.palantir.com/u/chi)\
**Replies:** 6\
**Last updated:** [August 14, 2024, 7:39am UTC](https://community.palantir.com/t/what-determines-ability-to-view-group-membership/998 "2024-08-14T07:39:44Z")

</div>

Hi, When you go directly to a group page under Platform Settings -\> Groups, what determines what you see under Members? You might see one of these: People who are members of this group \<list of visible members\> or No…

---

## [How can I manually add a user to an organization?](https://community.palantir.com/t/how-can-i-manually-add-a-user-to-an-organization/117)

<div class="topic-metadata">

**Author:** [@okr](https://community.palantir.com/u/okr)\
**Replies:** 1\
**Last updated:** [April 18, 2024, 8:07am UTC](https://community.palantir.com/t/how-can-i-manually-add-a-user-to-an-organization/117 "2024-04-18T08:07:30Z")

</div>

I am syncing user accounts from an authentication provider, but I want to add users to an organization manually (and not based on a rule or a user attribute). Is there a way? if so, how?
