How does LDAP authentication work in Loyalife?

​

LDAP Authentication in Xoxoday Loyalife

Xoxoday Loyalife integrates natively with LDAP-based directories, giving IT and HR administrators the ability to manage user access through a single, authoritative source. Instead of maintaining separate credentials for the loyalty platform, employees authenticate using the same identity they use across your organisation’s systems. This reduces friction for end users and eliminates the need to manage duplicate login credentials. When a user attempts to log in, Xoxoday Loyalife validates credentials against the connected LDAP directory in real time. Any changes made in your directory — such as deactivating an account or updating a role — propagate immediately to Loyalife without manual intervention.

​

Centralized Access Control

LDAP integration allows administrators to define and enforce access policies from one place. Role assignments, department-level permissions, and group memberships managed in your directory automatically reflect within Xoxoday Loyalife. This eliminates the risk of orphaned accounts and reduces the administrative overhead associated with onboarding and offboarding employees. For organisations running HR systems such as Workday, SAP SuccessFactors, or Darwinbox, LDAP serves as the connective layer that keeps user data consistent across platforms. Employees added or removed in these systems stay aligned within Loyalife without requiring duplicate data entry.

​

Enterprise Security and Compliance

Xoxoday Loyalife’s LDAP support is built to meet enterprise security standards. Authentication traffic is encrypted in transit, and the integration is compatible with compliance frameworks including ISO 27001 and SOC 2 Type II. Security teams can be confident that user authentication within the loyalty program meets the same standard applied to other mission-critical enterprise applications. Administrators retain full visibility into who has access to Loyalife, what permissions they hold, and when those permissions were last reviewed. Audit trails generated through LDAP-authenticated sessions support compliance reporting and internal governance requirements.

​

Example: Automated Provisioning with an LDAP Directory

Consider an organisation that uses Workday as its HR system of record, backed by an LDAP directory for identity management. When a new employee joins, their account is created in the LDAP directory. Xoxoday Loyalife picks up this record during synchronization and automatically provisions the employee with the appropriate role and access level — no separate onboarding step is needed within Loyalife. When the employee leaves, deactivating their LDAP account immediately revokes their access to Xoxoday Loyalife. This ensures no residual access remains after their departure, satisfying both IT security policy and compliance audit requirements.

---

Learn more: [Xoxoday Loyalife Help Centre — System requirement](