• SYNC
  • GROUPS
  • ERRORS
  • HUMAN

How to manage user provisioning with your AI

Connect BoxyHQ to your AI client to audit your directory. Your agent handles the heavy lifting of checking user and group status to keep your access syncs clean.

Ask AI about this page

Short answer

How can I use AI to manage user provisioning?

Your AI uses BoxyHQ to pull real-time data from your directory users and groups. It identifies mismatches between your identity provider and downstream apps so you can fix sync errors immediately. You'll see exactly where your provisioning is drifting.

Sync outcomes

Where your sync data lands.

The AI categorizes directory information into these specific outcomes.

SYNC

Accurate user lists

The AI pulls current user data to confirm who should have access. You get a clean view of your active directory state.

GROUPS

Group membership audits

The agent checks group structures to ensure permissions match your current org chart. This prevents permission creep.

ERRORS

Provisioning drift alerts

The AI flags users who exist in your directory but haven't synced to your apps. You get a list of specific accounts to investigate.

HUMAN

Manual intervention needed

The AI identifies broken syncs or missing attributes. You decide when to manually trigger a fix in your SSO provider.

The workflow

What your AI does when the sync drifts.

The AI acts as an auditor by pulling data directly from your directory via BoxyHQ.

  1. Fetch user data

    The agent pulls a complete list of users from your tenant to establish a baseline.

    get_directory_users

  2. Audit group structures

    The AI pulls group definitions to check if user permissions are correctly mapped.

    get_directory_groups

  3. Identify mismatches

    The agent compares the directory data against your expected provisioning state to find orphans or missing users.

    get_directory_usersget_directory_groups

  4. Report discrepancies

    The AI summarizes exactly which users or groups are out of sync so you can take action.

    get_directory_users

Try it

Copy these to start.

Use these prompts to begin your audit.

Starting points

Replace the bracketed text with your specific directory or group names.

BoxyHQ Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_mklve50aPp8ZWYnoHIPytmbMOI56yquxuMIE9WQ1/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — BoxyHQ capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "boxyhq-enterprise-sso-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_mklve50aPp8ZWYnoHIPytmbMOI56yquxuMIE9WQ1/mcp"
    }
  }
}
Copy into chat04

  • List all users in the Engineering group to check for recent additions.

  • Compare the users in my directory against the current SSO sync status.

  • Check the membership of the 'Admin' group to see if any unauthorized users were added.

  • Find all users in the directory who are not currently assigned to any groups.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect BoxyHQ once, then ask.

Link your BoxyHQ account in one click. Your credentials stay encrypted, and you can immediately start asking your AI about your directory data.

Connect BoxyHQ to your AI

FAQ

How this task behaves.

  • 01

    Can the AI add or delete users in my directory?

    No. The AI can only read user and group data. You must perform all additions, deletions, or permission changes within your SSO provider or BoxyHQ dashboard.

  • 02

    Can the AI fix a broken sync automatically?

    No. The AI identifies where the sync has failed or drifted, but it cannot execute the fix. You remain in control of the actual provisioning actions.

  • 03

    How often does the AI see new users?

    The AI sees whatever is currently available in your directory at the moment you ask the question.

  • 04

    Does the AI have access to my passwords?

    No. The AI only accesses the directory metadata and group memberships provided by the tools.

  • 05

    Can I use this to audit specific departments?

    Yes, as long as those departments are represented as groups in your directory.

  • More questions about BoxyHQ? The Connector page answers them. See everything the BoxyHQ Connector can do

Connect BoxyHQ to Claude, Cursor, ChatGPT & more