title: Using the AI Chat (ChatHub) category: ChatHub tags: chat, AI, natural-language, commands, search, briefing, insights priority: High
Using the AI Chat (ChatHub)
IdentityCenter includes a built-in AI-powered chat interface that lets you query your directory, get insights, and manage your environment using natural language. No need to memorize navigation paths or build complex filters — just ask.
Getting Started
Access the ChatHub from the Chat icon in the navigation bar or by navigating to Chat from the main menu.
The chat interface supports:
- Natural language questions — Ask anything in plain English
- Slash commands — Type
/followed by a command for direct actions - Follow-up suggestions — Click suggested follow-up questions after each response
Asking Questions in Natural Language
Just type what you want to know. The AI understands your intent and routes it to the right data:
Example questions:
- "Show me all disabled user accounts"
- "Who are the members of Domain Admins?"
- "Find users who haven't logged in for 90 days"
- "What groups does john.smith belong to?"
- "Show me computers running Windows Server 2016"
- "How many users are in the Marketing department?"
- "List all service accounts"
- "Find orphaned accounts"
The AI analyzes your question, queries the appropriate data, and returns formatted results with actionable information.
Slash Commands
For quick, direct actions, use slash commands. Type / to see a list of available commands:
Search & Discovery
| Command | Description | Example |
|---|---|---|
/search |
Search for any object by name or attribute | /search john smith |
/list |
List objects by type with optional filters | /list groups |
/find |
Find specific objects matching criteria | /find users department=IT |
/count |
Count objects matching criteria | /count disabled users |
Identity & Access
| Command | Description | Example |
|---|---|---|
/members |
Show members of a group | /members Domain Admins |
/groups |
Show group memberships for a user | /groups jsmith |
/access |
Show all access for a user | /access jane.doe |
/manager |
Show who reports to a manager | /manager john.smith |
Insights & Analytics
| Command | Description | Example |
|---|---|---|
/briefing |
Get a comprehensive security briefing | /briefing |
/insights |
Show AI-generated risk insights | /insights |
/stale |
Find stale/inactive accounts | /stale 90 (days) |
/risk |
Show risk analysis for a user or group | /risk Domain Admins |
Synchronization
| Command | Description | Example |
|---|---|---|
/sync |
Show sync status or trigger a sync | /sync status |
/jobs |
Show recent job execution history | /jobs |
Reporting
| Command | Description | Example |
|---|---|---|
/report |
Generate a report | /report compliance |
/audit |
Show audit log entries | /audit |
/stats |
Show environment statistics | /stats |
/summary |
Get a summary of your environment | /summary |
System
| Command | Description | Example |
|---|---|---|
/help |
Show available commands and usage | /help |
/status |
Show system health status | /status |
The /briefing Command
The /briefing command is one of the most powerful features. It generates a comprehensive security overview of your environment, including:
- Account Statistics — Total users, active/disabled counts, recent changes
- Security Alerts — Accounts with expiring passwords, locked accounts, stale logins
- Privileged Access — Members of administrative groups, accounts with elevated privileges
- Compliance Status — Policy violation summary, access review progress
- Risk Indicators — Inactive admin accounts, accounts with no password expiration, delegation risks
This is perfect for a daily or weekly check-in on the health of your identity environment.
Follow-Up Suggestions
After each response, the chat shows clickable suggestion chips — common follow-up questions based on what you just asked. For example:
- After asking about a user → "Show their group memberships", "Check their risk score"
- After a briefing → "Show inactive admin accounts", "List expiring passwords"
- After listing groups → "Show members of [group name]", "Find empty groups"
Click any suggestion to immediately run that query.
How the AI Works
The ChatHub uses a multi-tier approach to understand your questions:
- AI Intent Parsing — Your natural language message is analyzed by an AI model to determine what you're asking for
- Smart Routing — The system routes your request to the appropriate command or data query
- Streaming Responses — Results are streamed back in real time so you see data as it loads
- Context Awareness — The AI understands your environment's data and provides relevant, specific answers
Types of Responses
| Type | Description |
|---|---|
| Data Tables | Formatted tables with search results, member lists, etc. |
| Insights | AI-generated analysis with risk assessments and recommendations |
| Statistics | Counts, summaries, and aggregated metrics |
| Greetings | Friendly responses to casual messages with helpful suggestions |
Tips for Better Results
- Be specific — "Show me disabled users in the IT department" works better than "show users"
- Use names — "Find john.smith" or "Find John Smith" both work
- Combine criteria — "List users who haven't logged in for 60 days and are in the Finance department"
- Use slash commands for speed — When you know exactly what you want, slash commands are faster than natural language
- Check follow-up suggestions — They often point you to the next logical question
- Use /briefing daily — It's the fastest way to stay on top of your identity environment
Common Use Cases
Morning Security Check
- Open ChatHub
- Type
/briefing - Review the security overview
- Click follow-up suggestions to investigate any alerts
Pre-Audit Preparation
- Ask "Show me the compliance status for SOX"
- Ask "List all users with privileged access"
- Ask "Find accounts that haven't been reviewed in the last quarter"
- Export the results for your auditor
Investigating a User
- Search for the user: "Find jane.doe"
- Check their access: "What groups does jane.doe belong to?"
- Check activity: "When did jane.doe last log in?"
- Check risk: "Show risk score for jane.doe"
Finding Cleanup Opportunities
- "Show me accounts disabled for more than 6 months"
- "Find groups with no members"
- "List computers that haven't logged in for 90 days"
- "Show me users with password never expires"
Next Steps
- Directory Browser — Browse your objects visually
- Intelligence Overview — Learn about risk scoring and analytics
- Access Reviews — Start reviewing user access