diff --git a/docs/concepts-accounts.md b/docs/concepts-accounts.md
index 51cb6bf..148f3f2 100644
--- a/docs/concepts-accounts.md
+++ b/docs/concepts-accounts.md
@@ -46,7 +46,7 @@ on, just like anyone else's.
A **group** is just a named list of accounts, used to control access. This
app has a handful of built-in groups that grant admin powers (e.g. only
-people in the `app_sso_admin` group can see the Users/Groups/Integrations
+people in the `app_sso_admin` group can see the Users/Groups/Directory/Executive
pages at all), but you can also make your own groups for any app you
connect — say, a group listing everyone who should be allowed into your
photo server. Once a group exists, add or remove members from the
diff --git a/docs/concepts-oauth-apps.md b/docs/concepts-oauth-apps.md
index 12be819..5479056 100644
--- a/docs/concepts-oauth-apps.md
+++ b/docs/concepts-oauth-apps.md
@@ -28,7 +28,7 @@ what matters practically is the handful of concepts below.
## What's a "client"?
Every app you connect is registered here as a **client** — a single entry
-on the Integrations page representing that one app. Registering a client
+in the Directory representing that one app. Registering a client
gives you a **Client ID** and **Client Secret**: think of these like a
username and password, but for the *app itself* rather than for a person.
You paste them into the other app's own "Single Sign-On" or "OIDC" setup
diff --git a/docs/directory.md b/docs/directory.md
index 397efea..1a671e7 100644
--- a/docs/directory.md
+++ b/docs/directory.md
@@ -58,6 +58,8 @@ Resources carry a flexible `metadata` JSON object that can store essential conte
The Directory Management interface provides a **Tree View** toggle that visually nests your resources, making it easy to comprehend your network topography at a glance. You can also filter, search, and sort your entire infrastructure inventory. From the tree view, you can click the green `+` icon next to any resource to instantly add a child resource beneath it.
+
+
## Slug conventions
Slugs are the stable identifiers automation keys off, so the tooling around the SSO Manager follows a shared convention:
diff --git a/docs/images/dashboard.png b/docs/images/dashboard.png
index 69f5b6d..18b4a81 100644
Binary files a/docs/images/dashboard.png and b/docs/images/dashboard.png differ
diff --git a/docs/images/directory.png b/docs/images/directory.png
new file mode 100644
index 0000000..9b1a4b3
Binary files /dev/null and b/docs/images/directory.png differ
diff --git a/docs/images/groups.png b/docs/images/groups.png
index b4e60c5..ffcb461 100644
Binary files a/docs/images/groups.png and b/docs/images/groups.png differ
diff --git a/docs/images/oauth-clients.png b/docs/images/oauth-clients.png
index 54cd3f4..e8790d5 100644
Binary files a/docs/images/oauth-clients.png and b/docs/images/oauth-clients.png differ
diff --git a/docs/images/users.png b/docs/images/users.png
index ddc9f88..60be54a 100644
Binary files a/docs/images/users.png and b/docs/images/users.png differ
diff --git a/docs/index.md b/docs/index.md
index 5ae11ed..ec9389c 100644
--- a/docs/index.md
+++ b/docs/index.md
@@ -22,10 +22,11 @@ one command).
## Screenshots
-
+
-
+
+
*(click any screenshot to view full size)*
diff --git a/docs/oauth.md b/docs/oauth.md
index f8e8fce..d1b80b5 100644
--- a/docs/oauth.md
+++ b/docs/oauth.md
@@ -64,6 +64,8 @@ Clients are managed directly from the **Directory** tab in the web UI. They are
> All client-management actions use the standard Directory API (`/api/directory-admin/resources`) and are gated by the `app_sso_directory_admin` group.
+
+
## Scopes
| Scope | Claims / access |