# Identity

## Overview

### SCIM & Directory Sync Providers

Our platform supports integration with SCIM (System for Cross-domain Identity Management) and various Directory Sync providers. This functionality allows administrators and workspace owners to seamlessly manage user accounts, ensuring that they can be easily created, updated, or deleted as needed. By connecting your workspace to a SCIM or Directory Sync provider, you can automate the onboarding and offboarding process, saving time and reducing errors.

#### **Steps to Connect a SCIM Provider:**

1. **Navigate to Identity Settings:**
   * Go to the `Settings` menu in your workspace.
   * Select `Identity` from the list of options.
2. **Select SCIM Integration:**
   * Click on `Connect SCIM Provider`.
   * Choose your SCIM provider from the list of supported options.
3. **Enter SCIM Credentials:**
   * Provide the necessary credentials and configuration details required by your SCIM provider.
   * Click `Save` to establish the connection.
4. **Verify Connection:**
   * Once the connection is established, verify that the synchronization is working correctly by checking the user list in your workspace.

#### **Steps to Connect a Directory Sync Provider:**

1. **Navigate to Identity Settings:**
   * Go to the `Settings` menu in your workspace.
   * Select `Identity` from the list of options.
2. **Select Directory Sync Integration:**
   * Click on `Connect Directory Sync Provider`.
   * Choose your directory sync provider (e.g., Okta, Azure AD) from the list of supported options.
3. **Enter Directory Sync Credentials:**
   * Provide the necessary credentials and configuration details required by your directory sync provider.
   * Click `Save` to establish the connection.
4. **Verify Connection:**
   * Once the connection is established, verify that the synchronization is working correctly by checking the user list in your workspace.

### User Session Duration

To enhance security and control over user access, you can configure the duration of user sessions. This setting determines how long a user can remain logged in without needing to reauthenticate.

**Steps to Configure User Session Duration:**

1. **Navigate to Identity Settings:**
   * Go to the `Settings` menu in your workspace.
   * Select `Identity` from the list of options.
2. **Set Session Duration:**
   * Find the `Session Duration` section.
   * Enter the desired session duration (e.g., 8 hours, 24 hours).
   * Click `Save` to apply the changes.

### Force User Reauthentication

For security reasons, there may be times when you need to force all users to log out and reauthenticate. This can be useful after critical updates, changes in security policies, or potential security threats.

**Steps to Force User Reauthentication:**

1. **Navigate to Identity Settings:**
   * Go to the `Settings` menu in your workspace.
   * Select `Identity` from the list of options.
2. **Force Reauthentication:**
   * Click on the `Force Reauthentication` button.
   * Confirm the action in the prompt that appears.
   * All users will be logged out and required to log in again to continue accessing the workspace.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.countercyclical.io/fundamentals/settings/workspace/advanced/identity.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
