Skip to main content
The Directory is where you manage who your people are. It holds your users, the profile attributes that describe each one, and the groups you organize them into. Everything else in Iru Identity builds on the directory: applications grant access to its users and groups, and authentication policies decide how those people sign in. In the dashboard, the Directory brings these sections together:

Users

Each person in your organization, with a profile, a status, and a record of how they were added.

Schema

The schema of built-in and custom fields that every user profile can hold.

Groups

Collections of users you assign access to as a unit - manual, built-in, or auto.

Auto Groups

Groups whose membership is computed from an attribute and stays current on its own.

Importing users

Bring people in in bulk from a file, and review the results.

Directory Sync

Sync people from an HRIS or directory solution so the directory stays current automatically.

Roles

The role each user holds, which governs what they can do in Iru.

​
What lives in the directory

  • Users are the people in your organization. Each has a profile, a sign-in identity, and a status that reflects where they are in their lifecycle.
  • Profile attributes are the fields a profile can hold - built-in facets such as name, email, and phone, plus any custom attributes you define in your schema.
  • Groups are collections of users. You assign access to a group once, and everyone in it inherits that access. See Groups.

​
How people get into the directory

There are three ways to add people, and you can mix them as your needs change.

Add manually

Create a user by hand from Directory → Users. Best for a few people or a quick test.

Import from a file

Upload a CSV to create many users at once. See Importing users.

Sync from your HR system

Connect an HR system so people are created, updated, and removed automatically on a schedule. See Directory Sync.
Every user records a source - where they originated, such as added manually, imported from a file, or synced from a connected HR system. The source appears in the users list so you can always see how someone got into the directory.
Manual entry and CSV import are great for getting started. When your HR system is the system of record for who works at your company, connect it so the directory keeps itself current as people join, change roles, and leave.

​
The user lifecycle

People join, move, and leave your organization, and their directory record follows along through a small set of statuses.
StatusWhat it means
PendingThe user has been created but is not yet active. This is the starting point for a freshly added or imported person.
ActiveThe user is fully enabled and can sign in and reach the apps assigned to them.
SuspendedThe user’s access is blocked, but their record and history are kept. Use this when someone is on leave or being offboarded.
Suspending is reversible - you can reinstate a suspended user, and they return to the status they held before. Removing a user is permanent and is meant for people who have left for good. The difference between suspending and removing, and how to invite people to finish setting up their accounts, is covered in Users.

​
Where the directory is used

The directory is the foundation the rest of Iru Identity stands on:
  • Applications grant access to directory users and groups, and map profile attributes into the identity details each app receives. See Assigning access.
  • Authentication policies evaluate the user signing in and decide what they must prove. See Authentication policies.
  • Auto Groups read profile attributes to compute their membership automatically. See Auto Groups.
New to Iru Identity? Start with Key concepts for the full set of objects, then follow the Quickstart to stand up your first sign-on.