The workflow routes panel provides a clear, visual way to audit the security of your automation endpoints. By displaying your workflows grouped by their authentication mode, you can quickly assess how your routes are exposed and identify which might need additional security review.
The radar chart displays your workflows based on how they authenticate incoming requests. The center of the chart shows the total count of workflows with active, live routes.
Authentication modes
Routes are categorized by their security level:
Public: No authentication is required; anyone with the URL can trigger the route. These are considered exposed to the open internet and should be reviewed carefully.
External ID: Authenticated via an external identifier.
Tenant: Authenticated at the tenant level.
SSO: Authenticated via single sign-on.
Connector: Authenticated through a connected app or connector.
Space: Authenticated at the space level.
How workflows are counted
A workflow is counted for an authentication mode if it contains at least one route using that mode. Because a single workflow might contain routes with different security settings, that workflow may be represented in multiple segments of the chart.
Drilling down for details
You can click on any radar segment to view a detailed modal. This displays a breakdown of the specific workflows in that category, along with route counts, route types, and paths. You can sort this list by name or by the number of routes to prioritize your security audits.
