User Provisioning

User Provisioning

You can manage provisioning of ServiceNow user accounts using Hire2Retire IGA. The accounts can be provisioned when an employee is hired, or when the role changes. Similarly, the account can be deprovisioned on role changes or termination.

Hire2Retire IGA supports seamless provisioning of user accounts in ServiceNow. This functionality enables automatic creation, updating, or deactivation of ServiceNow user accounts based on predefined policies. Provisioning or deprovisioning actions are triggered by any employee lifecycle event within Hire2Retire.

User Provisioning Criteria

Figure 1. Role-based provisioning configuration in Hire2Retire IGA

You can provision ServiceNow accounts for all the your employees based on their profile attributes. You can define complex conditions to assign Profiles using AND and OR logic based on employee's IdP attributes or Group memberships in the IdP.
For example: Users with Department Sales and Title Sales Officer will be assigned Sales Manager Profile. User(s) with Department Audit and Title Manager will be assigned Audit profile. Only users who are assigned a profile will get an account provisioned in ServiceNow.

You can select if you don't want to have to account in ServiceNow deprovisioned on role changes.

Configuring User Attributes

Figure 2. Mapping user attributes for provisioning in Hire2Retire IGA

You can user Hire2Retire's powerful data mapping and transformation capabilities to define the user's attributes. Both HR as well as IdP attributes can be mapped to the ServiceNow attributes.