Identity api scope approval ui macos