Integrating GHR to AD

mmartinez

Wondering if anyone had integrated GHR with AD so when a new employee is hired that employee is created with the basic employee information needed in Active Directory?

unknown

I’ll try a bit of high level how we did ‘security provisioning’ on prem as that may help you.

We had ipa that had logic to identify new hires/rehires

Created actor, link the employee/employee search agents to the actor, create the hr org context record and the rmid on the lsf side

Generated a .csv that our service desk staff would review nightly and create ‘shell Active Directory’ accounts and then specify the account in the csv and then put it is a dedicated folder.

Another IPA would pick it up and then create the Identity and the SSOP record and link to the Actor and the lsf rmid record the next morning. Internal manager processing for new hires would then be done to specify what AD access they really needed. Our HR staff then had the .csv with the user password and ad login, so when they arrive for on boarding, HR provides that information, has them login , reset their password, etc



Now that we recently went to the cloud, we had internal developers use the Infor API's to identify new hires/rehires and developed 'code' on prem to then write to AD and create the shell, specify emp id, email address and some standard AD groups/containers.

My email is abice@genesishcs.org if you would like me to send ipa's... I don't think I can' attach them here