Feature
Public surface
Publish chosen users and groups to an unauthenticated search, with every personal field removed.
Every directory user and group is private by default. Publishing sets the other-view bit of its Mode; only an org:admin can publish or unpublish, and it is the only path that makes a resource public.
GET /public/search returns published users and groups only, as the public projection: no email, phone, birth date, SSH key or employee number. It is rate limited per client address.
Publishing and unpublishing emit user.public_changed and group.public_changed events.
More features
All features →- 01
Directory lookups
The LDAP Sync Cache contract: find a directory user by any of five identifiers, search, list, and get groups with nested groups expanded.
- 02
SSH keys lookup
Fetch the public SSH keys of one directory user, or of every member of a directory group, by name.
- 03
Directory sync
Sync sources feed the directory. Each sync run upserts users and groups and keeps users who left as inactive tombstones.