Skip to main content

We use cookies for essential site functions and anonymous analytics. Choose what to allow.

Accepts all cookies and closes this banner
Reject All

Identity Proxy

Bridged messages can show the original sender's name and avatar, not a generic bot. Coverage varies: Slack still shows an APP label and Zoom posts from the app.

By Kumar MakalaUpdated

The guest account problem

Traditional cross-platform messaging integrations solve identity in one of two costly ways: every sender becomes an anonymous bot account (destroying attribution), or every sender requires a full guest account on the destination platform (creating directory sprawl and licensing overhead). An enterprise with 500 Slack users connecting to a Teams organization should not need 500 Teams guest licenses just to preserve sender names. SyncRivo's sender attribution works at the routing layer, without requiring guest accounts.

How SyncRivo's identity proxy works

  • Display name mappingSyncRivo resolves senders against the directory it syncs from each platform. When a message is routed, the sender's display name is carried through to the destination message.
  • Platform-native attributionAttribution uses each platform's available mechanism: Slack's username and avatar override (with the APP label still shown), posting as the sender on Google Chat and Webex where authorized, and delegated posting in Teams chats for users who connected their account. Teams channels and Zoom show the app with the sender's name.
  • Built on directory syncReal mentions and sender attribution resolve through SyncRivo's directory sync, available on all five platforms. Without it, messages fall back to a post from the app with a sender header and plain-text mentions.

Benefits

  • No guest accounts required for bridging
  • Sender name shown on bridged messages
  • Per-connection switch for sender name/email display
  • Owner, admin and member roles

How the Identity Proxy works in SyncRivo

Directory sync

SyncRivo syncs user directories from Slack, Microsoft Teams, Google Chat, Webex and Zoom on a schedule. SyncRivo does not use SCIM or SAML; directory sync reads user lists from the chat platforms themselves. Dashboard sign-in is with Google or email and password, with optional MFA.

Resolving the sender

When a message arrives, SyncRivo looks up the sender's platform user ID (Slack U01XYZ, Teams AAD object ID, Google Chat users/12345, Zoom user ID, Webex person ID) in the synced directory. @mentions of people in the synced directory become real mentions on the destination; others arrive as plain text.

Attribution at delivery

On Slack, messages use a per-message username and avatar override, and Slack still shows the APP label. On Google Chat, messages are posted as the sender when that person is a Workspace member and domain-wide delegation is granted. On Webex, messages are posted as the sender when that person has authorized Webex. On Teams, group chats and 1:1 DMs are posted as the sender for users who connected their account; channels always show the SyncRivo app with the sender's name. Zoom posts from the app.

Platform-specific behavior

Here is how the Identity Proxy behaves across each messaging platform we support. Attribution fidelity depends on what each platform allows an app to do.

PlatformBehaviorKnown limitation
SlackDisplay-name and avatar override via chat.postMessage username/icon_url.Slack always shows the APP label. Existing workspaces must re-consent to the required scope. File messages stay app-authored.
Microsoft TeamsGroup chats and 1:1 DMs posted as the sender with their own delegated token, for users who connected their account.Never in channels; other senders get a bot post with a sender header.
Google ChatPosted as the sender via domain-wide delegation when the sender is a Workspace user and space member.External senders get a header post; files keep app authorship.
Zoom Team ChatPosted from the SyncRivo app with the sender's name.Zoom cannot post as an arbitrary sender; only the install owner's own messages appear as themselves.
Cisco WebexPosted with the sender's own Webex token when that sender has authorized Webex.Other senders get an app post; files keep legacy authorship.

Frequently asked questions

What is an identity proxy in messaging integration?
An identity proxy ensures that messages bridged between platforms display the original sender's name and identity — not a generic bot or service account. Without an identity proxy, all bridged messages appear from a single bot account, making conversations impossible to follow. SyncRivo carries the sender's identity across platform boundaries so Teams users see the Slack user's name, and Slack users see the Teams user's name. Slack still shows an APP label, and on Teams the message is posted as the sender only for users who connected their account and never in channels.
Does SyncRivo create bot accounts in Teams or Slack?
Bridging does not require guest accounts. SyncRivo posts through its app on each platform and shows the sender's name using each platform's available mechanism: a name and avatar override on Slack, posting as the sender on Google Chat (Workspace users, with domain-wide delegation) and Webex (users who authorized Webex), posting as the sender in Teams chats for users who connected their account, and the app with the sender's name elsewhere. Optional guest/shadow accounts are available separately if you want partner users in native people search.
What happens to user identity in regulated environments?
Sender attribution relies on directory sync, so SyncRivo stores synced directory data such as names and emails. Message content is not stored on the normal relay path. Admins can switch display of the sender's name/email on or off per connection. A BAA is available for Enterprise customers.

Related integration guides

Three-Platform Bridges

Connect three enterprise messaging platforms simultaneously with SyncRivo's cross-platform bridges.

cookie_consent.banner.aria_announcement