> For the complete documentation index, see [llms.txt](https://www.cakewalk.security/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.cakewalk.security/docs/platform-overview/connections-and-integrations/hris-and-idp.md). # HRIS and IdP Cakewalk connects to your company's HRIS or Identity Provider and treats it as the source of truth for people. One connection feeds both modules of the platform. ### 📖 Key Concepts * **HRIS**: Human Resources Information System (Personio, HiBob, BambooHR, Rippling, Workday and others). * **IdP**: Identity Provider (Okta, Entra ID, Google Workspace). * **User attributes**: fields synced from your HRIS or IdP (name, email, manager, department, job title, location). :bulb: *Why this matters*: Every access decision on the platform starts with who someone is. The sync makes "who" a structured fact instead of a manual lookup. *** ### 🔄 What the Connection Feeds * **The User directory**: every person in one place, with manager relationships for approval routing. * **Lifecycle automation**: joiners, movers and leavers trigger workflows in real time. See [User Lifecycle](/docs/platform-overview/human-access-and-agent-access/user-lifecycle.md). * **Group sync**: IdP groups drive [group-based access (RBAC)](https://www.cakewalk.security/docs/human-access/how-to-guides/users-and-groups/groups-and-role-based-access-control-rbac) in Human Access, including the Apps each group grants by default. * **Agent Policies**: every action an agent takes is evaluated in Agent Access against department, job title, team and location. *** ### 🔒 What Cakewalk Reads, and What It Never Reads The sync needs an admin account with rights to read user profiles, reporting lines and groups. Cakewalk reads names, emails, manager relationships and organizational attributes. It does not need and does not read payroll data, health data or details about sexual and religious orientation. *** ### ⏱ Sync Cadence User data syncs automatically every 2 hours. Lifecycle events (joiners, movers, leavers) trigger their workflows in real time. *** ### 🔌 Where You Connect It * Running Human Access, alone or with Agent Access: go to **Settings → Data Sources → Users**. See [Connecting an HRIS](/docs/platform-overview/connections-and-integrations/connecting-an-hris.md). * Running Agent Access standalone: the connection is part of [admin setup](https://www.cakewalk.security/docs/ai-agent-access/introduction/get-going-with-agent-access/admin-setup). With both modules live you connect once, in Human Access; Agent Access works from the same directory. *** ### 🧩 Supported Systems Every system Cakewalk connects to as an identity source has its own setup guide, covering the plan, the admin role and the credential it needs on the vendor side. * **HRIS**: Personio, HiBob, BambooHR, Rippling and more. Full list: [Identity Source Guides](/docs/platform-overview/connections-and-integrations/identity-sources.md). * **Identity Providers**: [Okta](/docs/platform-overview/connections-and-integrations/identity-sources/okta.md), [Microsoft Entra ID](/docs/platform-overview/connections-and-integrations/identity-sources/microsoft-entra-id.md) and [Google Workspace](/docs/platform-overview/connections-and-integrations/identity-sources/google-workspace.md). *** ### 📚 Related * [Connecting an HRIS](/docs/platform-overview/connections-and-integrations/connecting-an-hris.md) * [User Lifecycle](/docs/platform-overview/human-access-and-agent-access/user-lifecycle.md) * [How They Connect](/docs/platform-overview/human-access-and-agent-access/how-human-access-and-agent-access-connect.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://www.cakewalk.security/docs/platform-overview/connections-and-integrations/hris-and-idp.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.