Directory Integrations
Directory Integrations
Directory integrations connect Incode to your organization's user directory, syncing employee records so that Incode can look up users and perform claims matching during verification sessions.
When a directory integration is configured, Incode can locate a user by their loginHint—typically a corporate email address or employee ID—and match verified identity attributes from their government-issued ID against the data in your directory. This ensures that the person completing a verification is the same person on record.
Directory integrations do not require a linked Workflow and do not trigger verification sessions on their own. They supply the user data that other integration types—such as IAM, ITSM, and Custom—rely on when performing directory-backed lookups.
Directory integrations also populate the Directory Information page in Dashboard, which lists all synced users and their enrollment status.
Understand Directory Sync
After a directory integration is configured and connected:
- Incode pulls your user records from the connected directory, Okta or Microsoft Entra, and stores the relevant identity attributes: name, email, employee ID, and any mapped claims fields.
- Records stay in sync. User additions, updates, and deactivations in your directory are reflected in Incode automatically.
- A verification session starts. Incode uses the
loginHintto look up the user's directory record and supply their attributes to the claims matching module. - Claims matching runs. Verified attributes from the government-issued ID (name, date of birth, address, email, phone) are compared against the directory record. Mismatches can be configured to trigger a hard stop or a soft flag for manual review.
Available Directory Integrations
| Integration | Status |
|---|---|
| Okta Directory | Available |
| Microsoft Entra Directory | Available |
| Bring Your Own Directory (BYOD) | Coming soon |
Directory vs. IAM Integrations
Directory and IAM integrations both involve Okta and Microsoft Entra, but they serve different purposes:
- Directory integrations handle user data sync. They tell Incode who your users are and what attributes they have.
- IAM integrations handle authentication flows. They trigger verification sessions when a user signs in, resets credentials, or requires a higher-assurance check.
A directory integration is typically a prerequisite for IAM and other integration types that rely on claims matching.