> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# WorkOS

> How DSALTA integrates with WorkOS — data collected, setup guide, and automated compliance checks.

## Overview

DSALTA connects to WorkOS using read-only API access to collect compliance evidence automatically. DSALTA syncs your **User Management roster** (the users in your organization) and your **WorkOS organizations**, then feeds them into your Data Library modules. Data syncs every 24 hours.

<Info>
  **Read-only access.** DSALTA never modifies, creates, or deletes resources in your WorkOS account.
</Info>

## How to Connect

WorkOS connects with an **API key** — there's no app to install. The free tier is sufficient; no paid or enterprise plan is required.

<Steps>
  <Step title="Open WorkOS API Keys">
    In the [WorkOS Dashboard](https://dashboard.workos.com), open **API Keys**.
  </Step>

  <Step title="Copy your Secret Key">
    Copy your **Secret Key** (a test key, `sk_test...`, works; `sk_live...` also works). It grants read access to your User Management users and organizations.
  </Step>

  <Step title="Connect">
    In the DSALTA sidebar, go to **Integrations**, find **WorkOS**, and click **Connect**. Paste the Secret Key in the secure window and submit.
  </Step>

  <Step title="Finish">
    DSALTA runs an initial sync — usually a few minutes — after which the compliance checks below activate.
  </Step>
</Steps>

## Automated Compliance Checks

Each check below runs automatically every 24 hours. Click any check for step-by-step remediation guidance.

| Check                                                                                                                 | Description                                                                       |
| --------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
| [User access to Critical System should be valid](/integrations/workos/user-access-to-critical-system-should-be-valid) | Checks that everyone with WorkOS access is an active employee on the People page. |
| [Offboarded users should not have active access](/integrations/workos/offboarded-users-should-not-have-active-access) | Checks that offboarded employees no longer have active WorkOS access.             |

## Troubleshooting

<AccordionGroup>
  <Accordion title="Integration shows Disconnected">
    Re-authenticate from **Integrations → WorkOS → Reconnect**. This can happen if the Secret Key was revoked or rotated in the WorkOS Dashboard.
  </Accordion>

  <Accordion title="Data is not syncing">
    Confirm the Secret Key is still active in **WorkOS Dashboard → API Keys**, then trigger a manual sync from the integration settings.
  </Accordion>
</AccordionGroup>