Skip to main content

PlusPlus 101: Connect your HRIS & identity provider with People Integration

Learn how to load your employee data into PlusPlus

Written by Chris Ramlow

Why integrate your people data?

Once your employee data is in PlusPlus, users can sign in, get assigned to groups, receive content automatically, and have their activity tied back to a complete user record. Pulling in attributes like department, title, manager, and hire date unlocks features that depend on knowing who someone is and where they sit in the org:

  • Users engage more when they see colleagues' photos, titles, departments, locations, and reporting relationships.

  • Reports filter and aggregate by employee attributes for richer organizer insights.

  • Managers see and manage their directs' activity once manager-direct relationships are established through Manager's Email.

  • Automated rules use employee data to manage groups, enroll users into events, and assign tracks. Onboarding rules require Hire Date, and rules can match on any custom field your integration provides.

How it works

People integration moves user data from your HRIS or identity provider into PlusPlus on a recurring basis. Three things happen on every sync:

  1. Data flow. Depending on the method, PlusPlus either fetches data from your system on a schedule, or your system pushes data to PlusPlus.

  2. Attribute mapping. Incoming fields are mapped to PlusPlus user attributes using JMESPath expressions.

  3. User updates. Users are created, updated, or deprovisioned based on the latest data.

Choose your integration method

We recommend an API-based integration whenever possible. Direct API and SCIM are real-time or near-real-time, more reliable, and require less ongoing operational effort than file-based syncs. CSV over SFTP is supported as a fallback for environments where no API option is available.

Your source system

Use this method

Workday HRIS

UKG Pro (UltiPro) HRIS

Another HRIS that supports HTTPS, JSON or CSV, and Basic / Token / OAuth authentication

Direct API (custom)

Okta, OneLogin, or another SCIM-capable identity provider

Your environment doesn't support an API-based integration

CSV over SFTP (fallback)

You can also pair SCIM with Direct API. SCIM provisions and deprovisions users in real time but covers only required attributes. Pairing it with Direct API adds optional and custom attributes for richer reporting and automated rules.

Compare methods

Direct API

SCIM

CSV over SFTP (fallback)

Data flow

We fetch from you

You push to us

You push to us

Sync frequency

Daily

On demand

Daily

Required attributes

Optional attributes

Custom attributes

Self-serve setup

Partial (Workday)

Yes

No (CSM-assisted)

Employee data

Each employee record can include the fields below. Only Full Name and Email Address are required.

Field

Description

Required?

Full Name

Full name of the employee

Yes

Email Address

Primary email of the employee

Yes

Picture URL

URL pointing to the employee's profile picture

No

Employee ID

Identifier from your HRIS

No

Hire Date

Date the employee joined (YYYY-MM-DD)

No

Termination Date

Date the employee left (YYYY-MM-DD). Triggers deprovisioning.

No

Department

Department name

No

Title

Job title

No

Location

Logical name of the employee's physical location. Must match a configured PlusPlus location, otherwise the field is left blank.

No

Manager's Email

Primary email of the employee's manager

No

Custom attributes

Business Unit, Cost Center, Last Promotion Date, and so on

No

Set up your integration

Pick the method from the table above and follow the matching setup guide:

  • Direct API — PlusPlus fetches user data from your HRIS daily. Supports UKG Pro and other HRIS systems with compatible APIs.

  • Direct API: Workday — Workday-specific setup using Report as a Service (RaaS).

  • SCIM — Real-time provisioning and deprovisioning from SCIM-capable identity providers like Okta and OneLogin.

  • CSV over SFTP (fallback) — Daily CSV upload to a PlusPlus SFTP repository. Use only when an API-based integration is not feasible.

Operate your integration

Validate and monitor

The People Integration Syncs dashboard lets you run dry-run syncs, inspect raw payloads, debug attribute mappings, and trigger manual syncs. Run a dry run before every configuration change.

Dashboard support varies by method:

  • Direct API and Workday — full dry-run, payload inspection, and manual sync.

  • CSV over SFTP — full dry-run capability, with one caveat: the dashboard operates on the most recently uploaded file in the SFTP repository. Re-upload a file before each dry run, since the process consumes the file when it runs.

  • SCIM — no dry-run support. To validate a SCIM integration, push a user change from your identity provider and confirm the user's fields update in PlusPlus as expected.

Combine methods

For organizations that want both real-time provisioning and rich attribute coverage, SCIM can be paired with Direct API. SCIM delivers required attributes and immediate provisioning/deprovisioning when a user is added or removed in your identity provider, and Direct API layers optional and custom attributes — department, manager, hire date, custom HR fields — on top through the daily fetch. This is useful when your IdP doesn't propagate the full set of HR attributes you need for reporting and automated rules.

Map attributes

All three methods map the incoming payload to PlusPlus user fields using JMESPath expression syntax. Mappings are editable in the People Integration Syncs dashboard. For complex mappings, work with your CSM or support — incorrect mappings are the most common cause of failed syncs.

Remove users

Removing a user through people integration immediately suspends their access. Anonymization, event reassignment, and full deprovisioning follow a configurable quarantine period. See People Integration: User Deprovisioning for the full lifecycle.

Did this answer your question?