Hire2Retire’s Role-Based Access Control (RBAC) is an industry leader in provisioning and de-provisioning system access for Active Directory (AD) accounts. Now, as part of the Phase 5.4 release, the power and scope of Hire2Retire’s RBAC have been extended to third-party applications like Salesforce, ServiceNOW, and DocuSign through SCIM provisioning. This is how you can set up SCIM provisioning in your Hire2Retire workflow and ensure third-party application access is granted on a need-to-know basis.
To create an integration for SCIM provisioning, link a connection to a compatible third-party application in the “Provisioning” tab of your Hire2Retire workflow. From there, you can define roles within the integrated application based on security group assignments or have Hire2Retire provision or de-provision accounts for all employees. Once a SCIM integration has been created Hire2Retire will automatically provision and de-provision accounts in the application as it processes employee lifecycle events.
Before Phase 5.4, Hire2Retire could process the new hire of a sales manager, provision access for that new hire in AD, and assign the employee profile to a security group. But with a SCIM integration, Hire2Retire can now also create a Salesforce account with a sales manager role that the new hire can access on their first day of work. Currently, SCIM provisioning is available for the following 15 third-party applications, with more compatible applications to be added in future releases: