Falaah Falaah AI

Connecting and Authorizing an Integration

How to authorize a connection in Muin: the sign-in popup, the approval screen an outside app shows you, and how to fix an authorization that failed.

Authorizing is the step where you sign in to another service and tell it Muin may use your account, or where an outside app asks to use your Muin organization and you approve it.

There are two directions, and each has its own screen:

Direction Example Where you start What you see
Muin connects to a service Google Drive, QuickBooks, Google Calendar Connections → Integration Catalog → Connect A popup with the service’s own sign-in page, then Connected Successfully!
An app connects to Muin Claude The app itself, or Settings → Integrations → Connect to Claude Muin’s approval screen: “[App] is asking for access to [your organization]”

When you’d use this

  • You are connecting Google Drive, QuickBooks or a calendar for the first time.
  • A connection says it needs to be reconnected, or a sync started failing after a password change.
  • An app such as Claude opened a Muin page asking you to Allow access.
  • The authorization popup closed with Authorization Failed and you want to know why.

Connect a service to Muin

Only owners and admins can add connections.

  1. In the sidebar, open Connections.
  2. Select the Integration Catalog tab (or click Add Integration at the top right).
  3. Find the service and click Connect. The setup window shows Authorize [service] and lists what Muin will access.
  4. Continue. A popup window opens on the service’s own sign-in page. Sign in there and approve access. Muin never sees your password for that service.
  5. The popup shows Completing Authorization, then Connected Successfully!, and closes itself after about two seconds.
  6. Finish the remaining setup steps (for cloud storage, pick the folders to sync). The new connection appears under My Integrations.

On a phone or anywhere a popup cannot open, the sign-in happens in the same tab and you land on the new connection’s page when it finishes.

QuickBooks can also be connected from Settings → Integrations → Connect QuickBooks. It opens the same kind of popup to Intuit.

What the catalog buttons mean

The button on each catalog card tells you whether you can connect it today:

Button Meaning
Connect Available. Click it to start authorizing.
Set Up or Managed in Settings Available, but set up on its own screen. Slack is set up in Settings → Integrations; the custom REST API connector in Settings → Integrations → API Connectors; Finch payroll in HR → Payroll.
Not available yet Not connectable yet.
Upgrade to Connect The service belongs to a module your plan does not include.
Unavailable Temporarily switched off for every organization.

A Connected badge next to the name means your organization already has that service connected.

Approve an app that asks for access to Muin

When an outside app connects to Muin, Muin shows you an approval screen before anything is shared. Today the in-product way to start this is Settings → Integrations → Connect to Claude.

  1. Start the connection from the app. The app opens a Muin page in your browser.
  2. If you are signed out, click Sign in. Muin brings you straight back to the same request after you sign in.
  3. Read the screen. It names:
    • the app and the organization it wants (“Claude is asking for access to Falaah Foundation”),
    • Can read: the areas it would see, such as donors and contributions, fund balances, grants, documents and workflow tasks,
    • Can change: what it could do on your behalf, if anything, such as recording a contribution (which still goes through your approval gate) or advancing a workflow,
    • where the sign-in code goes after you approve.
  4. Check the Organization line. To approve for a different organization, choose Not this organization? and switch first.
  5. Click Allow access, or Not now to refuse. Nothing is shared until you click Allow access.
  6. The tab hands you back to the app. You then have 5 minutes to finish in the app before the approval expires.

Things to know before you approve:

  • The app gets what you can already see, never more, and only in this one organization. Your password is never shared.
  • An Unverified app badge means the app registered itself, so its name is its own claim. Approve only apps you started from yourself.
  • Only an owner or administrator can approve an app that asks to change things. Any owner, admin or member can approve an app that only reads. If your role is not enough, you see You cannot approve this request and can ask an owner to approve it instead.

Review or end an app’s access

Open Settings → Integrations → Connected apps. Each app shows who authorized it and when its access ends (90 days after approval unless the app reconnects). Click Revoke access, then End access now. The app loses access immediately.

What it affects

  • A new service connection appears under Connections → My Integrations, and its first sync runs on the schedule you chose (or click Run first sync now on the connection page).
  • Imported files land in Documents; synced QuickBooks records appear under Settings → Integrations → QuickBooks.
  • An approved app appears in Settings → Integrations → Connected apps until you revoke it.
  • Deleting a connection stops all of its syncs. The connection page warns: “This will stop all syncs. Data is preserved for 90 days.”

When it goes wrong

What you see Why What to do
Popup blocked. Please allow popups for this site… Your browser blocked the sign-in window. Muin copies the sign-in link to your clipboard. Allow popups for Muin and click Connect again, or paste the link into a new tab.
Authorization timed out. Please try again. The sign-in was not finished within 2 minutes. Click Connect again and complete the sign-in in one go.
Authorization Failed with “Invalid or expired OAuth state. Please try again.” The popup was left open too long, or it was opened from an older tab. Close the popup and start again from Integration Catalog.
Authorization Failed with the service’s own message (for example access_denied) You clicked cancel or deny on the service’s page, or your account there lacks permission. Try again with an account that has admin rights in that service.
Your connection needs reauthorization or Insufficient permissions on an existing connection The service revoked the token, usually after a password change or an admin removing access. Open the connection, click Disconnect, then connect it again from Integration Catalog.
We do not recognize the app making this request The approval link was incomplete or came from an app Muin does not know. Nothing was shared. Close the tab and start again from Settings → Integrations → Connect to Claude.
This request cannot be completed The app’s request was refused before it reached you, or Muin could not be reached. Nothing was shared. Start the connection again from the app.
We could not record your answer. Nothing was granted. A temporary error while saving your approval. Click Allow access again. If it keeps failing, contact support with the reference shown.

Next step