Xoxoday supports directory integration for user accounts through standards-based SSO protocols, automated SCIM-based provisioning and deprovisioning, MFA enforcement, Just-In-Time user creation, and Role-Based Access Control across Empuls, Compass, Loyalife, and Loopr.
Authentication and Identity Management
Xoxoday supports a range of authentication options to fit different organizational security postures. Local authentication is available with configurable password policies, including expiration rules, password history, and complexity requirements. For organizations that require stronger security, Multi-Factor Authentication can be enforced either through the connected identity provider or via Xoxoday’s native OTP mechanism — no third-party MFA tool required. Just-In-Time provisioning automatically creates user accounts the first time an employee signs in via SSO, eliminating manual onboarding entirely. Directory synchronization keeps user records continuously updated and handles deprovisioning when employees leave, reducing the risk of orphaned accounts that could expose sensitive data.Role-Based Access Control
Xoxoday’s RBAC engine maps directory groups directly to platform roles or allows administrators to define roles natively within each product. This ensures HR teams, managers, and individual contributors each see only the data and functionality appropriate to their responsibilities — a requirement directly aligned with compliance frameworks such as ISO 27001 and SOC 2 Type II.How Each Product Uses Directory Integration
Empuls, Xoxoday’s employee engagement platform, leverages directory connections to systems like Workday or Darwinbox so that recognition programs, surveys, and communication tools are immediately accessible to authorized employees upon first login. RBAC ensures HR admins, people managers, and employees each operate within defined boundaries. Compass, the sales and channel incentive platform, integrates with sales team directories to restrict commission dashboards and incentive data to the appropriate reps, managers, and administrators — preventing unauthorized access to sensitive performance metrics. Loyalife, Xoxoday’s customer loyalty platform, links member accounts to enterprise identity providers so that redemption portals and campaign management tools enforce consistent access controls for marketers and program admins. Loopr, the merchant-funded offers platform, allows merchants and offer managers to authenticate via enterprise SSO, protecting sensitive offer data and validation workflows under enterprise-grade identity governance.Getting Started
Organizations configure directory integration through Xoxoday’s admin console, with support for widely used identity platforms. IT administrators can also work with Xoxoday’s implementation team to set up custom identity provider connections that align with existing enterprise security policies. Learn more: Xoxoday Help Centre — Technical requirementDoes Xoxoday support SAML or OIDC for SSO?
Learn which SSO protocols Xoxoday supports and how to configure identity provider connections for your organization.
How does Xoxoday handle user provisioning and deprovisioning?
Understand how SCIM-based directory sync automates account lifecycle management across all Xoxoday products.