--- title: Optro API Integration on Truto slug: optro category: Compliance canonical: "https://truto.one/integrations/detail/optro/" --- # Optro API Integration on Truto **Category:** Compliance **Status:** Generally available ## Unified APIs ### Unified User Directory API - **Groups** — Groups are a collection of users in the source application. In some applications, they might also be called Teams. - **Roles** — The Role object represents a role of a User. - **Users** — The User object represents a User. ## How it works 1. **Link your customer's Optro account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Optro.** The Proxy API is a 1-to-1 mapping of the Optro API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate Quarterly User Access Reviews for SOC 2** — HRIS, IdP, and IT management platforms can sync users, roles, and group memberships into Optro so their customers can complete User Access Reviews without manually exporting CSVs. This turns a multi-day audit chore into a continuous, evidence-backed workflow. - **Prove Access Revocation for Terminated Employees** — Offboarding and identity platforms can push live user status and role changes into Optro so auditors can instantly verify that departing employees lost access within SLA. Your customers close a common audit finding without leaving your product. - **Continuous Evidence for Group and Role Assignments** — Security and IT platforms can feed group membership and role assignment data into Optro to continuously satisfy ISO 27001 and SOC 2 access controls. Customers stop screenshotting admin panels every quarter. - **Map Privileged Access to Compliance Controls** — PAM and identity governance tools can surface admin roles and sensitive group memberships in Optro, letting compliance teams tie privileged users directly to the controls that govern them. This closes the gap between IAM data and GRC reporting. ## What you can build - **One-click Optro connection for your customers** — Let end users authenticate their Optro workspace from inside your app through Truto's managed auth, with no custom OAuth handling on your side. - **Scheduled user directory sync into Optro** — Push Users, Roles, and Groups from your platform into Optro on a recurring schedule so access data stays current between audits. - **Access Review dashboards backed by live Optro data** — Build an in-app UAR view that reads user, role, and group data via Truto's Unified User Directory API so reviewers can approve or revoke access without switching tools. - **Terminated-user attestation reports** — Automatically flag users removed in your platform and reflect their status in Optro, generating a timestamped audit trail your customers can hand to auditors. - **Group-to-control mapping workflows** — Let your customers map their Optro controls to specific groups or roles in your product, so any membership change becomes traceable evidence. - **Role-change webhooks into compliance workflows** — Use Truto's event model on the Unified User Directory API to notify Optro whenever a user's role or group membership changes, keeping identity evidence continuous. ## FAQs ### Is the Optro integration available today through Truto? Optro is available as a built-on-request integration. Once scoped, Truto exposes it through the Unified User Directory API so you can work with Users, Roles, and Groups using the same schema you use for other identity sources. ### What Optro data can I access via Truto? Through the Unified User Directory API, you can read and sync Users, Roles, and Groups from Optro. Other Optro objects such as Controls, PBC Requests, and Issues are not part of the current unified schema and would require a custom passthrough scope. ### How does authentication work for end customers? Truto handles the Optro auth flow end-to-end. Your users connect their Optro workspace through a Truto-hosted or embedded link, and Truto stores and refreshes credentials so you never touch tokens directly. ### Can I push data into Optro, or is it read-only? The Unified User Directory API supports both read and write operations where the underlying provider allows it. Exact write coverage for Optro is confirmed during the build-on-request scoping so you know which fields on Users, Roles, and Groups are writable. ### How fresh is the synced identity data? You can pull data on demand, run scheduled syncs, or subscribe to Truto's change events on the Unified User Directory API. This lets you keep Optro aligned with your source of truth in near real time rather than only at audit time. ### Can I access Optro fields that aren't in the unified schema? Yes. Truto supports passthrough requests to the underlying Optro API and exposes provider-specific fields alongside the unified model, so you can extend your integration without waiting for schema changes.