This page can't call OneLogin's API directly from the browser — that would mean putting your OneLogin API credentials in front-end code anyone could read, which isn't safe. Directory data now lives in a D1 database behind functions/org-directory.js, so it persists across visits instead of resetting every time. Reading it needs nothing extra; saving to it (syncing from OneLogin, or uploading a file for everyone) needs the admin token below.

Expected fields (any reasonable header names are auto-matched): id, name (or first/last name), title, department, email, managerId (or manager's email). With an admin token entered, an upload is saved to the shared database for everyone; without one, it only previews in this browser tab. "Reset this view" only affects your own tab — it doesn't touch the saved directory.