I'm curious about the best onboarding process for new employees. Right now, our new hires' info starts in the HR system, which IT can't access initially. Once HR finishes processing, they send an onboarding request through our ITSM system, which triggers the creation of user accounts in Entra ID. This same flow applies to updates or offboarding situations as well, but our current setup lacks a true-up process. In my experience with manual checks, I found that around 70% of users in Entra had mismatches with the HR system, like incorrect employee IDs, hire dates, and reporting managers. Some of these mismatches stem from user errors that could be avoided with proper ITSM requests. I'm starting to think maybe there should be a direct connection between HR and Entra for ongoing changes beyond just onboarding and offboarding.
4 Answers
You should definitely look into HR-driven provisioning for Entra. If your HRIS offers an API, you could automate changes or set up middleware to sync the data between systems. That way, you can ensure everything stays consistent without the manual effort. Just keep in mind, HR might still make mistakes like misspelling names, which can create extra hassle when you need to fix things later.
It really varies by company. For us, we've integrated our HR system to capture basic details like title and employment status, which helps streamline the onboarding and offboarding process. This setup allows us to keep our dynamic groups in Entra updated efficiently. If you're thinking about solutions, tools like Okta offer direct integrations with several HR systems that can help with this too.
Exactly! Your HR system should handle feeding accurate employee details to your IT systems to minimize extra steps during onboarding.
Does your onboarding start with ITSM then push to Entra, or does it go the other way around?
In my last job, we had a middleware that connected the HR system and pushed updates to other systems whenever changes were made. It really helped streamline the process and reduced errors significantly.
We've got everything automated! Our HR system flags new start dates, and within a few days, it triggers user creation in Entra and sets everything up, like licenses and hardware requests. It even manages offboarding. If there's a mismatch, our system corrects it so HR is the main handler for any user information. This approach has worked wonders for us!
Totally agree! Those little errors can be super frustrating.