Glossary

Definitions of key terms used across Unqork documentation. Where a term has a specific meaning in Unqork that differs from common industry usage, that distinction is noted.

A

Agentic Components: A subset of Smart Components available in the mid-year release that let Creators customize and deploy agents in their end-applications using a model of their choice.

Anonymous Access: Access to an Express application without requiring the end-user to log in. Anonymous access is enabled by default and can be disabled in Environment Administration.

Application: A collection of modules organized and published for end-users. In Unqork, applications are also referred to as Express applications. Creators build and manage applications in workspaces. When promoted to a production environment, an application becomes the front-end that end-users interact with directly. Unqork supports two application types: Module Type applications, which deliver screens and forms built in the Module Builder, and Workflow Type applications, which use the Workflow Builder to drive multi-step processes across user interactions and automated tasks.

Application (Module Type): An application that delivers screens and forms built in the Module Builder. End-users navigate through module pages to complete tasks, submit data, or view information. See Module Builder.

Application (Pre-Production): A version of an application promoted to the Pre-Production environment level for final validation before Production. Pre-Production uses the Production codebase, making it the closest non-Production environment to the live application. Pre-Production is optional and hosts test data only. See Environment Levels.

Application (Production): The live, promoted version of a Creator-built application accessible to end-users. A Production application has been promoted through environment stages and is accessible to end-users through a URL.

Application (QA): A version of an application promoted to the Quality Assurance environment level for testing and verification. Creators use QA to verify processes and artifacts and ensure the application meets best practices before moving to UAT. QA hosts test data only. See Environment Levels.

Application (Staging): A version of an application in the Staging environment level, where Creators configure and update it before promoting to QA. Staging is the starting point of the promotion pipeline and hosts test data only. See Environment Levels.

Application (UAT): A version of an application promoted to the User Acceptance Testing environment level, where Creators and end-users test the end-user experience before Production. UAT hosts test data only. See Environment Levels.

Application (Workflow Type): An application that uses the Workflow Builder to drive multi-step processes across user interactions and automated tasks. End-users move through workflow steps as the workflow routes between nodes, completing forms, waiting for approvals, or receiving notifications. See Workflow Builder.

Attribute Mapping: A configuration in an SSO setup that maps a claim from the identity provider to a Unqork user attribute. For example, the email claim can be mapped to the Unqork userId field. See Single Sign-On (SSO) Management.

B

Boundary Event: A node in the Workflow Builder that attaches to another node and fires when a specific condition occurs, like an error, a timeout, or a met condition. Unlike regular nodes, boundary events are placed directly on their parent node. See Swimlane Rules.

Build Agent: The UnqorkAI AI assistant integrated into the Module Builder. Creators describe what they want to build in plain language, and the Build Agent creates a plan, builds the components, connects the logic, and runs tests automatically. The Build Agent can also be referred to as the agent. See UnqorkAI.

Business Process Model and Notation (BPMN): A widely used notation for modeling business processes visually. Unqork's Workflow Builder is inspired by BPMN concepts, though it uses Unqork-specific terminology in some areas.

BYO (Bring Your Own Component): A feature that lets Creators build custom Unqork components using third-party JavaScript libraries and custom code.

C

Canvas: The central editing surface in the IDE where a Creator works on an application—module, workflow, or other artifact.

currentUser: A built-in object available in Unqork modules during server-side execution that contains information about the logged-in end-user, including their ID, name, email, role, and group memberships. See currentUser Object.

Certificate Authority (CA): An organization that issues and digitally signs certificates, vouching for the identity of the entity named in the certificate. Common examples include DigiCert and Let's Encrypt. See Certificate Concepts.

Claim: A piece of user information provided by an identity provider during SSO authentication—for example, an email address or group membership. Claims are mapped to Unqork user attributes using attribute mapping. See SSO Concepts.

Content Security Policy (CSP): A browser-enforced security standard that controls which external resources an Express application is allowed to load. Configured in Environment Administration. See Environment Security Concepts.

Cross-Origin Resource Sharing (CORS): A browser mechanism that controls which external origins are allowed to make API requests to the Unqork environment. Configured in Environment Administration. See Environment Security Concepts.

Component: A building block placed on the Module Builder canvas. Components can collect input, display content, execute logic, or connect to external systems. Each component has a Property ID that uniquely identifies it in a module.

Creator: The person who builds applications in Unqork. The term Creator is specific to Unqork. In the broader industry, this role is typically called a developer, configurator, or low-code builder.

D

Dot Notation: A syntax for navigating a nested data structure by chaining property names with periods—for example, currentUser.email or data.address.city. In Unqork, is the standard way to reference specific values in submission data and system objects. It is used in component output and input settings to wire data between components, in template expressions to insert dynamic values into content, and in the currentUser object to access properties like name, email, and role. See Template Expressions and currentUser Object.

Data Workflow: A Module Builder component that executes a configurable pipeline of data operations in sequence, like API calls, transformations, filtering, and sorting. Creators build the pipeline visually using operators on the Data Workflow canvas. In Unqork, Data Workflow is a component, not the same as a workflow built in Workflow Builder.

Data Workflow Operator: An individual step in a Data Workflow component's pipeline. Each operator performs a specific function, like calling an API, filtering a dataset, or transforming a value. Operators are connected on the Data Workflow canvas to define the order of execution.

Domain (SSO): The user type an SSO configuration applies to. Unqork supports two SSO domains: Express (Express application users) and Designer (Creators). See SSO Concepts.

E

End-User: A person who interacts with a published Express application. End-users are the intended audience of a Creator's application. In Unqork documentation, "end-user" always refers to the end-user of an Express application, not the Creator.

Entrypoint: The primary module of an application. The Entrypoint module is the first module an end-user accesses when they navigate to the application's URL. Each application has one designated Entrypoint.

Environment: A deployment of the Unqork platform with its own configuration, data, users, and modules. Organizations typically have separate environments for development, staging, and production.

Express: The Unqork front-end application framework that delivers Creator-built applications to end-users. Express is the layer end-users interact with—the published forms, screens, and navigation built in the Module Builder. Express is distinct from Express View, which is a Creator-facing preview tool in the IDE.

Express View: A Creator-facing preview and troubleshooting mode in the Unqork platform. Express View opens a module or application in a full browser tab at the same URL an end-user would visit, with a preview bar at the top that provides debugging controls and user-selection tools. Creators use it to verify behavior, test role-based access, and inspect network activity. End-users do not see the preview bar. See Viewing and Previewing Applications.

G

Genesis User: The initial administrator account created when an environment is first provisioned. The genesis user exists before any other users are added and is used to complete initial environment setup.

Global Variable: A key-value pair defined at the environment level and accessible across all modules in that environment. Managed in Global Variables Administration.

I

Integrated Development Environment (IDE): The browser-based workspace where Creators build, edit, review, and manage Unqork applications. Also referred to as the Unqork platform. The IDE replaces what was previously referred to as UDesigner and Classic Designer, which are considered legacy.

Identity Provider (IdP): An external system that authenticates users and provides identity information. Common examples include Okta, Microsoft Entra ID (formerly Azure AD), and Ping Identity. Used in SSO configurations. See SSO Concepts.

J

JSON Web Token (JWT): A compact, signed token used to verify a user's identity and maintain their session. In Unqork, JWTs are used to authenticate end-user sessions in the published application. Session behavior is configured in Environment Administration. See Environment Security Concepts.

L

Locale Module: A system module that stores all translation data for an application. Because translation data is stored in the Locale module rather than in individual modules, the Locale module must be promoted separately when moving an application across environment levels. See Translations.

M

Module: In Unqork, a module is a single application screen or form built in Module Builder. In most development contexts, "module" refers to a reusable code unit. The Unqork meaning is specific to its platform.

Module Builder: The Unqork tool used to build individual modules by placing and configuring components on a canvas.

Mutual TLS (mTLS): An extension of TLS in which both the client and the server present certificates to verify each other's identity. Used in Unqork service connections to authenticate outbound requests. See Certificate Concepts.

O

OpenID Connect (OIDC): A modern authentication protocol built on OAuth 2.0 that uses JSON-based tokens to authenticate users. One of two SSO protocols supported by Unqork. See SSO Concepts.

Link: A connection between two nodes in the Workflow Builder that defines the the workflow follows. Output links can carry conditions that determine whether the link is followed and can be configured to display a flash message or run asynchronously. See Output Links.

Output Type: A setting in component outputs that specifies what operation to perform when writing a value to a field—for example, assigning a value, appending to an array, or clearing a field. See Output Types.

P

PFX (PKCS#12): A binary file format that bundles a certificate and its private key into a single file. Unqork uses PFX certificates for SAML SSO signing and Mutual TLS service connections. See Certificate Concepts.

Plan: The specification the Build Agent produces before configuring an application. A plan captures current versus future behavior, component-level configuration intent, and acceptance tests. Plans are scoped to a single task.

Plug-In Component: A Module Builder component that makes outbound API calls. Plug-In components are used to connect modules to external systems through configured services.

Promote / Promotion: The process of moving a resource from one environment level to the next in the promotion pipeline. Resources begin in Staging and progress through QA, UAT, and optionally Pre-Production before reaching Production. Different resource types—Express roles, Express groups, styles, and translations—must each be promoted separately. See Promoting Resources and Environment Levels.

Property ID: The unique identifier assigned to a component in a module. Property IDs are used to reference component values across the module and in API calls. See Property ID Naming Conventions.

Q

Query Parameter: A key-value pair appended to a URL after the ? character, used to pass data to a web page or API endpoint. Multiple query parameters are separated by &. For example, in https://example.com?userId=123&limit=50, userId=123 and limit=50 are query parameters.

R

Record: Data stored through a Data Model. Records are validated against the Data Model's schema, which enforces field types, required fields, and validation rules at the data layer. "Record" is also used informally as a synonym for "submission" — the two share the same underlying storage, but records created through a Data Model are always schema-validated. See Data Models and Record Collections.

Refer String: An encrypted token generated by the Unqork API that authenticates an end-user into an Express application through a URL. Refer strings are commonly used in notification emails to give end-users a direct link to a module without requiring them to log in manually. See Refer Strings.

Regex (Regular Expression): A sequence of characters that defines a pattern for matching text. Used in Unqork components to validate end-user input—for example, requiring a field to contain only digits or match a specific format. See Regular Expression Patterns.

Role-Based Access Control (RBAC): A security model that restricts access to resources and functionality based on a user's assigned role. In Unqork, RBAC governs what Creators can access in the IDE and what end-users can access in Express applications. See Creator Role Administration and Express Role Administration.

S

Security Assertion Markup Language (SAML): An XML-based authentication protocol that exchanges signed assertions between an identity provider and a service provider. One of two SSO protocols supported by Unqork. See SSO Concepts.

Smart Component: The Unqork component architecture that ensures governance, security, and architectural best practices in applications. All Unqork components are Smart Components.

Server-Side Execution: Processing that runs on the Unqork server instead of in the browser. Certain components and services can be restricted to server-side execution only for security purposes.

Service: A reusable configuration in Unqork that defines how a module connects to an external system, including authentication method, host, and headers. Services are managed in Services Administration.

Service Provider (SP): The application that relies on an identity provider for authentication. In Unqork SSO configurations, Unqork is the service provider. See SSO Concepts.

Single Sign-On (SSO): An authentication method that lets Creators log in once through an external identity provider and access Unqork without managing a separate password. Configured in Single Sign-On (SSO) Management.

Snippet: A saved, reusable configuration of one or more components that can be inserted into any module. Snippets let Creators standardize common patterns across applications without rebuilding them from scratch. Snippets are also a listing type in the Unqork Marketplace, where module-level components like modals and drop-down lists are distributed by Unqork and verified partners. See Saving a Snippet.

Submission: The data saved when an end-user completes and submits a module. Submissions are stored and can be queried through the API. See Submission Data Structure.

Swimlane: A horizontal lane in the Workflow Builder canvas that defines the execution context for nodes. Unqork has two swimlanes: Automated (server-side) and Authenticated (end-user interaction). The term swimlane is specific to Unqork. In Business Process Model and Notation (BPMN), these are called pools or lanes. See Swimlane Rules.

T

Template Expression: A way to insert dynamic values into Workflow Builder node settings using double curly brace syntax—for example, {{ data.firstName }} or {{ currentUser.email }}. Values are resolved at runtime from submission data, system variables, or global variables. See Template Expressions.

Test: Auto-generated acceptance tests based on requirements, intended behavior, and edge cases that verify what was built matches a Creator's definition of done. Creators can also add their own acceptance tests for the Build Agent to validate.

Transform: A reusable data transformation configuration applied to module data at runtime. Transforms are defined in the Module Builder and can manipulate, format, or restructure submission data before it is used or displayed. See Transforms.

Trigger: The event or condition that causes a component to execute. Common triggers include module load, a field value change, or a button click. Trigger behavior is configured in a component's Actions settings.

V

UI View: An inline viewing mode in the Module Builder that renders the module on the canvas without opening a new browser tab. Creators use UI View for quick visual checks and Console-based debugging without leaving the builder. See Viewing and Previewing Applications.

View Toggler: The drop-down control in the Module Builder toolbar that switches the canvas between UI View, Logic View, and Config View.

W

Workflow Builder: The Unqork tool used to design and automate multi-step processes using a visual node-based canvas.

Workflow Node: An individual step in a workflow built in Workflow Builder. Each node performs a specific function, like presenting a form to an end-user, executing server-side logic, routing to different paths, or ending the workflow. Nodes are connected on the Workflow Builder canvas to define the flow of execution.

Workspace: The top-level container in Unqork that groups applications and controls who can access them.

X

X.509: The standard format for digital certificates, defining the structure of a certificate including its subject, issuer, validity period, and public key. Unqork uses X.509 certificates for SAML SSO and Mutual TLS. See Certificate Concepts.