User Provisioning

User Provisioning

Hire2Retire IGA (ServiceNow App on Hire2Retire) enables automated provisioning and deprovisioning of user accounts in ServiceNow based on employee lifecycle events from Hire2Retire. Provisioning occurs during events such as hiring or role changes. Similarly, the account can be deprovisioned on role changes or termination.

Hire2retire supports seamless provisioning of user accounts in ServiceNow, enabling automatic creation, update, or deactivation of ServiceNow user accounts based on predefined policies. Provisioning or deprovisioning actions are triggered by any employee lifecycle event within Hire2Retire.

User Provisioning Criteria

Figure 1. Role-based provisioning configuration in ServiceNow App

You can provision ServiceNow accounts for all your employees based on their profile attributes. Complex conditions can be defined to assign Profiles using AND and OR logic based on an employee's IdP attributes or Group memberships in the IdP.
For example: User(s) with Department Sales and Title Sales Officer will be assigned the Sales Manager Profile. User(s) with Department Audit and Title Manager will be assigned the Audit profile. Only users assigned a profile will have accounts provisioned in ServiceNow.

You can also choose whether accounts should be deprovisioned during role changes.

Configuring User Attributes

Figure 2. Mapping user attributes for provisioning in ServiceNow App

Use Hire2Retire’s data mapping and transformation capabilities to define user attributes in ServiceNow. Both HR and IdP attributes can be mapped to the ServiceNow attributes. This ensures accurate and consistent user data during provisioning.