Documentation Index
Fetch the complete documentation index at: https://conductorone-docs-ad-account-provisioning-setup.mintlify.app/llms.txt
Use this file to discover all available pages before exploring further.
What is a directory?
An application that holds a record for every person in your organization should be designated as your directory in C1. This single source of truth is typically one of these:- Your Identity Provider (IdP), such as Okta, Azure AD, or Google Workspace.
- Your Human Resources Information System (HRIS), such as BambooHR or Workday, especially if it serves as the ultimate source of truth for all employee records.
- A custom app using a spreadsheet or CSV of employee data.
Connect a directory and create user accounts
As part of setting up C1 for your organization, designate a key app as your directory, which will serve as the source of truth for creating C1 user accounts.Step 1: Integrate an app that holds employee records
First, set up an application in C1 that holds a record for each employee, such as your HR system or your identity provider (IdP). Browse the connectors library for a list of available direct integrations, and let us know if you don’t find what you’re looking for. You can also create a new app using a spreadsheet or CSV of key employee data as the data source.Step 2: Set the app as the directory
Next, tell C1 that the app you’ve integrated is your directory.Select an application in the dropdown. Only apps that have been set up and synced at least once are available to select.
Optional. Follow the docs if you want to limit which accounts will be pulled into C1 or specify a custom merge matching strategy. You can also edit these settings later if you’re not ready to configure them now.
Optional: Limit which accounts will be pulled into C1
By default, C1 creates users for all accounts in a designated directory. If you want to create users from only a subset of a directory’s accounts, you can do so:Click CEL expression and enter an expression that returns the list of accounts you want to create users for.
Step 3: C1 creates user accounts from your directory app
When an app is set as a directory, C1 automatically uses the info in the directory’s accounts to create C1 user accounts. Each user’s email address is the key data point. Accounts from various apps integrated with C1 are all tied to the same human user because they all share an email address.How does C1 match and rationalize users across apps?
C1 creates a single, unified identity for each employee by intelligently matching their various accounts across all connected applications. C1 reads the list of employees from the your directory and automatically creates a new C1 user for each human. The user’s unique identifier (generally a work email address) is stored with this central identity. When you integrate subsequent applications with C1, the platform ingests the list of accounts from each app. For each ingested app account, C1 attempts to match the account’s unique identifier with an identifier already associated with a C1 user. Once a match is confirmed, the new application account is linked to the C1 user. All of the user’s access, entitlements, and activity across every integrated app are now rationalized under this single user identity.Configure merge matching
By default, C1 matches directory accounts to C1 users by comparing email address and employee ID. Custom merge matching lets you replace those rules with your own ordered set — useful when your directory uses different identifiers or when you need finer control over how accounts are linked. These settings are available both when adding a new directory and when editing an existing one.Open directory settings by doing one of the following:
- To configure an existing directory, click its … (more actions) menu and select Edit.
- To configure during initial setup, click Add directory data source and proceed through the setup flow.
In the Custom merge matching section, select Custom - define custom matching rules.The rules list pre-populates with the default rules as a starting point.
Configure your rules. Each rule pairs a Directory source account field with a C1 user field. Available fields are: Primary email, All emails, Username, Display name, and Employee ID.For email fields, check Remove + suffix to normalize addresses before comparing — for example,
user+tag@example.com is treated as user@example.com.To write a custom CEL expression instead of using a preset field, click the Switch to CEL expression icon.Add, remove, or reorder rules as needed. Rules are evaluated in order — C1 uses the first rule that produces a match.