Know how to Automate Access Requests, Certifications, and Compliance Reporting
190 Employees
Sullivan & Son Limited, a construction company with a growing workforce, needed to streamline how employee data flowed between its HR and identity systems. With BambooHR serving as the system of record and Microsoft Entra ID managing user identities, the absence of integration created operational inefficiencies and access management challenges.
User provisioning, updates, and offboarding processes were handled manually, leading to delays in onboarding, inconsistent access control, and increased dependency on IT teams. Additionally, the lack of structured role-based access and inconsistent use of HR data limited the organization’s ability to automate identity workflows effectively.
By implementing Hire2Retire, the organization established HR-driven identity lifecycle automation between BambooHR and Entra ID. This enabled real-time synchronization of employee data, automated provisioning and deprovisioning, and standardized access control, reducing manual effort while improving security and operational efficiency.
Sullivan & Son Limited is a Canadian construction company delivering infrastructure and utility projects across various sectors. With a workforce of 51–200 employees, the organization relies on digital collaboration tools and Microsoft 365 to support day-to-day operations.
As the company continues to grow, maintaining accurate employee data and ensuring timely access to systems has become critical for operational efficiency and workforce productivity. This has increased the need for a scalable approach to managing identity lifecycle processes across HR and IT systems.
As the organization expanded, disconnected systems and manual processes began to impact operational efficiency, access governance, and security.
BambooHR and Entra ID operated in isolation, with no automated integration to synchronize employee data. HR lifecycle events such as hiring, role changes, and terminations required manual interpretation and execution by IT teams.
This lack of integration resulted in delays, inconsistencies, and a reactive approach to identity management.
All user provisioning activities, including account creation, updates, and access assignments, were handled manually. IT teams were responsible for executing each lifecycle event, making the process time-consuming and difficult to scale.
This led to-
Access management lacked a defined framework. Roles were not standardized, and permissions were assigned using inconsistent logic rather than policy-driven rules.
Group-based access within Microsoft 365 existed but was inefficient and difficult to manage, particularly for shared resources such as SharePoint.
Without a structured RBAC model, the organization struggled to ensure that users consistently received the correct level of access.
Although BambooHR contained key employee attributes such as job title, department, and location, this data was not reliably structured or consistently used to drive access decisions.
Variations in how data was entered and maintained limited its effectiveness for automation. As a result, the organization could not confidently use HR attributes to define access policies, delaying the adoption of rule-based provisioning.
The organization did not use approval workflows within BambooHR for lifecycle events. Instead, approvals were handled externally through tools like DocuSign, and only the final updates were entered into the HR system.
This created a dependency on manual data entry timing. Since Hire2Retire relies on HR data as the trigger, any delay in updating BambooHR directly impacted the timing of provisioning and deprovisioning workflows.
Lifecycle events, particularly terminations, were not executed in real time. Access removal depended on manual updates, which introduced delays and increased the risk of unauthorized access.
The absence of automated deprovisioning created gaps in security and made it difficult to maintain compliance with identity and access governance requirements.
There was no standardized mechanism to map employee identities between BambooHR and Entra ID. Aligning employee records across systems required additional effort, increasing the complexity of managing identities and creating potential for mismatches or duplicate accounts.
M. Sullivan & Son Limited implemented Hire2Retire to establish a unified, HR-driven identity lifecycle automation framework.
Hire2Retire acts as the orchestration layer between BambooHR and Entra ID, ensuring that employee lifecycle events trigger real-time identity actions across systems.
Hire2Retire retrieves employee data from BambooHR via API and continuously monitors lifecycle events such as hires, role changes, and terminations. These events trigger automated workflows that create, update, or disable user identities in Entra ID.
Access is assigned based on predefined rules using employee attributes, enabling consistent and policy-driven provisioning.
The implementation introduced a standardized and automated identity lifecycle process–
With Hire2Retire in place, the organization achieved measurable improvements in efficiency, governance, and security.
Manual provisioning efforts were reduced by up to 80%, allowing IT teams to focus on strategic initiatives instead of repetitive tasks.
New hires now have accounts provisioned and access assigned before Day 1, ensuring immediate productivity and a consistent onboarding experience.
Role-based access control provides a structured and repeatable approach to assigning permissions, improving consistency, and reducing errors.
Automated deprovisioning ensures that access is revoked promptly during offboarding, reducing security risks and improving audit readiness.
Organizations implementing Hire2Retire have also seen up to 76% reduction in onboarding costs, highlighting the broader operational impact of automation.
By implementing Hire2Retire, M. Sullivan & Son Limited transitioned from fragmented, manual identity processes to a centralized, HR-driven model.
This transformation enabled-
Disconnected HR and IT systems create inefficiencies, security risks, and inconsistent user experiences. By implementing Hire2Retire, organizations can bridge this gap and automate identity lifecycle workflows end-to-end.
For M. Sullivan & Son Limited, integrating BambooHR with Microsoft Entra ID enabled real-time provisioning, standardized access control, and secure lifecycle management.
Ready to join the wave of companies automating their employee lifecycle management processes with Hire2Retire? Schedule a demo call with us today to see what Hire2Retire can do for your business.
190 Employees
