Suggestion: explain more clearly that WebAuthn device registration requires directory sync

[kenjenkins]

Page: https://www.pomerium.com/docs/capabilities/device-identity

What's incorrect or missing

It wasn't clear to me from reading https://www.pomerium.com/docs/capabilities/device-identity#enroll-devices-as-an-administrator-enterprise that you first need to configure directory sync before you can enroll a new device. (To be fair, it does say "generate custom registration links for users in their directory," but I didn't infer from this that directory sync was required.)

What's the resolution?

Maybe we could mention explicitly "You'll need to set up directory sync before you can enroll new devices" or something like that?

Side note: I searched for "directory sync" expecting to find a single documentation page with more explanation about what this is / how it works / etc., but I didn't find anything like that. Should there be a one page high-level explanation somewhere?

[ZPain8464]

@kenjenkins I agree with you that we should have a dedicated "Directory Sync" page. I think this would make sense under /docs/capabilities with the the Enterprise label. Thoughts?

I'll create a ticket in pomerium/internal so we can get team input.