The provisioning module of HelloID allows organizations to manage their account lifecycle within HelloID. It connects a source system—such as a Human Resources database—to a myriad of target systems—such as Active Directory. Like other modules in HelloID, provisioning is tightly integrated with PowerShell to allow maximum flexibility and extensibility.
The Provisioning Dashboard
On the provisioning dashboard, you get an overview of the entire provisioning module. It is split up into four distinct areas that each allow you to configure every aspect of your organization's provisioning process.
- Source Systems
Connect to a system, such as a Human Resources database, and retrieve information that will allow HelloID to create and manage accounts. This section also allows you to view an audit history of all system imports, so you know what has been done and when.
Once source records have been imported, corresponding Person Records in HelloID are created. This area allows you to see what information is included in each Person Record, along with what business rules and entitlements apply to them, as well as that record's audit history.
- Business Rules
In provisioning, business rules are used to tell HelloID what resources to grant to persons within your organization, and why. A "resource" in this case is an account, access, or group membership. For example, you can create a business rule that creates disabled account to everyone in the Research & Development department five days before their start date, and then another rule that activates that enables those accounts one day before their start date, and then adds several group memberships.
- Target Systems
In order to create and manage accounts, HelloID needs to be connected to a target system, such as Active Directory. This section allows you to create connections to your desired systems, either by selecting a pre-made connector from the library, or by using a generic PowerShell target for more custom situations.