SonarQube Cloud introduces Scoped Organization Tokens (SOTs) for Team and Enterprise users, replacing Personal Access Tokens with organization-level authentication that isn't tied to individual users. SOTs provide granular permissions, prevent CI/CD pipeline disruptions when team members leave, and offer centralized token management. The feature supports the principle of least privilege with specific scopes like "execute analysis" and includes expiration controls for enhanced security.
Table of contents
Why Scoped Organization Tokens matterAn example to illustrateHow to get started with SonarQube Cloud tokensSecure, resilient, and scalable authenticationSort: