Organizations often use a HR management tool like Zoho People, UltiPro and other tools to manage their employees. But when it comes to identity and access management in these organizations, IT administrators struggle with synchronizing the HR database with other dependent environments such as Active Directory, Microsoft 365, Microsoft Exchange, etc.
An easy solution to bridge this gap is ADManager Plus' secure and pre-built integration options with commonly used HRMS tools like Zoho People, UltiPro, Workday, and BambooHR, with capabilities like,
Automated user provisioning with approval-based workflow and notification alerts.
Synchronized deprovisioning to remove user accounts from all databases as and when the user is deleted from Active Directory.
Granular delegation of user management to help desk technicians with detailed audit reports.
How to configure the ADManager Plus and HR application integration
Navigate to Admin > System Settings > Integrations.
Choose the HR application to be integrated.
Configure the required settings like HR account credentials, web service URLs, etc.
The Data Source - LDAP Attribute Mapping tab has settings that allow you to map the Active Directory attributes to the predefined Database Column name provided in the HR application database. For example, if you want to map the 'givenName' attribute in Active Directory to the 'First_Name' attribute in the HR database, you can do so by selecting them under the respective drop-down menu on either side of the '=' in the Attribute Mapping tab.
Click Test Connection and Save.
How to set up an automated HR driven user provisioning using ADManager Plus
Navigate to Automation tab > Automation > Create New Automation
Configure the following settings.
Automation policy Name and Description - Enter a suitable name and description for the automation process.
Automation Category - Choose User Management.
Domain - Choose the domain and OUs where the task should be run in.
Automation Task/Policy - From the 'Automation policy' list, select the 'user provisioning' policy.
Location of CSV - Click this tab and choose Data from HR application you require.
Implement Business Workflow - Enable this option if you wish that the user creation be carried out after approval. This option will automatically create a user creation request; once it is approved by the appropriate technician or user mentioned in the workflow, the user accounts will be created in AD.
Select the Execution time and Frequency at which you want the automated user provisioning to be done.
Enable the Notification option if you wish to be notify the technician every time the automation gets executed.
Click Save.
Tune in next week for another quick tip for better identity and access management!
Cheers,
Team ADManager Plus.