Feature
Directory lookups
The LDAP Sync Cache contract: find a directory user by any of five identifiers, search, list, and get groups with nested groups expanded.
A directory user can be found by sAMAccountName, distinguishedName, DSS username, employee number or objectGUID. A search matches name, email, account or company, and two list calls return every user and every group with member counts.
A group lookup returns its group membership after nested groups are expanded to their leaf users, so a nested group never appears as a member.
These routes need a signed-in person with the org:contributor role or above and refuse service-account PATs, because they return personal fields such as email addresses and phone numbers.
More features
All features →- 01
SSH keys lookup
Fetch the public SSH keys of one directory user, or of every member of a directory group, by name.
- 02
Directory sync
Sync sources feed the directory. Each sync run upserts users and groups and keeps users who left as inactive tombstones.
- 03
Public surface
Publish chosen users and groups to an unauthenticated search, with every personal field removed.