Non-human identities (NHI) page and connector updates - #520
Open
mindymo wants to merge 9 commits into
Open
Conversation
Placeholder landing page for the NHI dashboard, requested by Product for search/discoverability while the feature set is still thin. Draft content, several open questions pending review. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Contributor
|
Preview deployment for your docs. Learn more about Mintlify Previews.
|
The dashboard's NHI tab is scoped narrowly to app registrations, assumable roles, and managed identities — not a rollup of service accounts, secrets, and agents as originally drafted. Those are separate, sibling categories on the same dashboard. Also removes the now-contradicted "ownership assignment not available" scope claim. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
mindymo
changed the title
Removes the terminology-is-evolving note and the whole Current scope section, replacing them with a single note near the top signaling that NHI capabilities are still under active development. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Verified against each baton-* connector's source (via org-wide code search for WithNHIType/WithSecretType) rather than taking the PM's list at face value. Marked only connectors emitting an actual NhiType (app registration, assumable role, managed identity), consistent with how the new NHI page scopes the term — connectors that only sync a static secret (Azure DevOps, Atlassian, Cloudflare, TeamCity) or only flag a service-type user (MongoDB Atlas) are excluded under this definition. Also added several connectors beyond the original list that the code search turned up: JumpCloud, OneLogin, Grafana, OpenAI, Databricks, and Azure Infrastructure. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Fingerprint reads as human identity verification; bot better signals a non-human/automated identity. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
"bot" isn't a valid Font Awesome icon name; the docs Icon component uses Font Awesome by default, and its equivalent is "robot". Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Mirrors the existing "this connector can sync secrets" callout pattern, linking to the new NHI page instead. Placed near each connector's Capabilities table, alongside any other capability notes. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
mindymo
requested review from
cvkramer,
erikhuckle-lab and
paigealleman-sketch
September 2, 2026 23:39
mindymo
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
product/admin/nhi.mdxpage covering the Identities & NHI dashboard, requested by Product as a placeholder for search/discoverability while the NHI feature set is still thin.nhi-identities-table.png,nhi-finding-detail.png) and wires the page intodocs.jsonunder Risk & intelligence.robot) tobaton/capabilities.mdx, verified connector-by-connector against actualbaton-*source (not just the PM-supplied list). Scoped strictly to connectors emitting a real NhiType (app registration/assumable role/managed identity) — connectors that only sync a secret or flag a service-type user don't qualify under this page's definition. Also surfaced and added several connectors beyond the original list: JumpCloud, OneLogin, Grafana, OpenAI, Databricks, Azure Infrastructure.Follow-up after merge
Open questions (not yet resolved)
Test plan