Connect a directory

Integrate your directory and designate sources of truth for employee information.

What is a directory?

An application that holds a record for every person in your organization should be designated as your directory in C1.

This single source of truth is typically one of these:

• Your Identity Provider (IdP), such as Okta, Azure AD, or Google Workspace.

• Your Human Resources Information System (HRIS), such as BambooHR or Workday, especially if it serves as the ultimate source of truth for all employee records.

• A custom app using a spreadsheet or CSV of employee data.

Once the directory is designated, C1 uses its data to automatically create C1 user accounts for everyone in your company.

Connect a directory and create user accounts

As part of setting up C1 for your organization, designate a key app as your directory, which will serve as the source of truth for creating C1 user accounts.

Step 1: Integrate an app that holds employee records

First, set up an application in C1 that holds a record for each employee, such as your HR system or your identity provider (IdP).

Browse the connectors library for a list of available direct integrations, and let us know if you don’t find what you’re looking for.

You can also create a new app using a spreadsheet or CSV of key employee data as the data source.

Step 2: Set the app as the directory

Next, tell C1 that the app you’ve integrated is your directory.

1. Navigate to Directory > User data sources.

2. On the Directories tab, click Add directory data source.

3. Select an application in the dropdown. Only apps that have been set up and synced at least once are available to select.

4. Optional. Follow the docs if you want to limit which accounts will be pulled into C1 or specify a custom merge matching strategy. You can also edit these settings later if you’re not ready to configure them now.

5. Click Create directory.

Optional: Limit which accounts will be pulled into C1

By default, C1 creates users for all accounts in a designated directory. If you want to create users from only a subset of a directory’s accounts, you can do so:

1. Click the directory’s … (more actions) menu and select Edit.

2. Click CEL expression and enter an enter an expression that returns true for the accounts you want to create users for.

   What your CEL expression can return

   Your expression decides what C1 should do with each account it sees. It can return a Boolean for a simple include/exclude, or a string for finer control:

   • “CREATE” (or true) — Match this account to an existing C1 user, or create a new C1 user from it if no match exists. This is the default behavior for accounts that pass the filter.
   • “MATCH_ONLY” — Link this account to an existing C1 user only; never create a new C1 user from it. Use this for accounts you want represented in C1 if a person already exists, but that should not add anyone to your roster.
   • “IGNORE” (or false) — Skip this account entirely. It is not matched to anyone and no C1 user is created from it. The account still exists in its source app, but it does not contribute to any C1 user identity.
3. Click Update.

Your CEL expression is now shown in the directory’s Account import condition column, and the directory will create users from only the accounts that match the expression. Any existing C1 users who do not match the new condition will be removed on the next directory sync.

Step 3: C1 creates user accounts from your directory app

When an app is set as a directory, C1 automatically uses the info in the directory’s accounts to create C1 user accounts. Each user’s email address is the key data point.

Accounts from various apps integrated with C1 are all tied to the same human user because they all share an email address.

How does C1 match and rationalize users across apps?

C1 creates a single, unified identity for each employee by intelligently matching their various accounts across all connected applications.

C1 reads the list of employees from the your directory and automatically creates a new C1 user for each human. The user’s unique identifier (generally a work email address) is stored with this central identity.

When you integrate subsequent applications with C1, the platform ingests the list of accounts from each app. For each ingested app account, C1 attempts to match the account’s unique identifier with an identifier already associated with a C1 user.

Once a match is confirmed, the new application account is linked to the C1 user. All of the user’s access, entitlements, and activity across every integrated app are now rationalized under this single user identity.

Configure merge matching

By default, C1 matches directory accounts to C1 users by comparing email address and employee ID. Custom merge matching lets you replace those rules with your own ordered set — useful when your directory uses different identifiers or when you need finer control over how accounts are linked.

These settings are available both when adding a new directory and when editing an existing one.

1. Navigate to Directory > User data sources.

2. Open directory settings by doing one of the following:

   • To configure an existing directory, click its … (more actions) menu and select Edit.
   • To configure during initial setup, click Add directory data source and proceed through the setup flow.
3. In the Custom merge matching section, select Custom - define custom matching rules.

   The rules list pre-populates with the default rules as a starting point.

4. Configure your rules. Each rule pairs a Directory source account field with a C1 user field. Available fields are: Primary email, All emails, Username, Display name, and Employee ID.

   For email fields, check Remove + suffix to normalize addresses before comparing — for example, [e-mail] is treated as [e-mail].

   To write a custom CEL expression instead of using a preset field, click the Switch to CEL expression icon.

5. Add, remove, or reorder rules as needed. Rules are evaluated in order — C1 uses the first rule that produces a match.

6. Click Update.

Done. C1 will use your custom merge rules on the next directory sync.

To revert to default matching at any time, select Default - match on email and employee ID and click Update.