User account provisioning and deprovisioning

Purpose

1. Automate user account provisioning and deprovisioning to streamline access control for employees, contractors, and partners in a computer store retail setting.

2. Automates the process of onboarding employees—creating accounts, assigning permissions, email, and software access—upon hiring or role change.

3. Automates deprovisioning by disabling or deleting user accounts and access rights when employees leave or are reassigned, ensuring security and compliance.

4. Supports IT and device management by automating creation and deletion of device and user associations across internal and cloud platforms.

5. Centralizes account lifecycle automation for enhanced auditability, efficiency, and risk reduction.

Trigger Conditions

1. Automated trigger from HRMS or onboarding system when a new employee is hired.

2. Automation triggered by changes in user roles or departments in ERP or directory services.

3. Deprovisioning automatedly triggered by employee offboarding or status update.

4. Manual initiation of automation flow for bulk onboarding or mass offboarding events.

5. API call from external provisioning tool or ticketing system.

Platform Variants

1. Microsoft Azure AD

• Feature: Automate user creation/deletion via Graph API (`/users` endpoint), set user roles, enable/disable status.
  
• Sample: Configure HTTP Node to POST/DELETE `/users`.
  

2. Okta

• Feature: Automates provisioning/deprovisioning with Okta Users API (`/api/v1/users`).
  
• Sample: Configure API key and PATCH to `/api/v1/users/{id}` for suspend/unsuspend.
  

3. Google Workspace

• Feature: Automates account setup and suspension via Directory API (`users.insert`, `users.delete`).
  
• Sample: Configure credentials, call `users.insert` for new user, `users.delete` for exits.
  

4. AWS IAM

• Feature: Automates user onboarding/offboarding with AWS IAM API (`CreateUser`, `DeleteUser`).
  
• Sample: Configure AWS credentials, automate `CreateUser` and `DeleteUser` functions.
  

5. Slack

• Feature: Automates inviting/removing users with Slack API (`users.admin.invite`, `users.admin.setInactive`).
  
• Sample: Automator with token, POST to `users.admin.invite`.
  

6. ServiceNow

• Feature: Automates user record management via REST APIs (`/api/now/table/sys_user`).
  
• Sample: Configure API integration, automate POST for create, PATCH for deactivate.
  

7. JumpCloud

• Feature: Automates with Directory Insights API (`v2/systemusers`).
  
• Sample: Automate user provisioning API call for add/remove.
  

8. Zendesk

• Feature: Automates agent/end-user setup via Users API (`/api/v2/users`).
  
• Sample: POST/DELETE requests for user automation.
  

9. BambooHR

• Feature: Automates workflow from HR data via Webhooks or BambooHR API (`/employees`).
  
• Sample: Automate account provisioning on new hire webhook.
  

10. Freshservice

• Feature: Automates service desk user management with REST API (`/api/v2/requesters`).
  
• Sample: Automatic POST/DELETE for onboarding and offboarding.
  

11. Salesforce

• Feature: Automates user account actions with REST API (`/services/data/vXX.X/sobjects/User`).
  
• Sample: Automator to insert or deactivate user accounts.
  

12. Workday

• Feature: Automates through Workday API (`/human_resources/v1/users`).
  
• Sample: Automation triggers create or deactivate functions per user record change.
  

13. Rippling

• Feature: Automates with user lifecycle API and platform-integrated automations.
  
• Sample: Triggered onboarding/offboarding automation via platform webhook.
  

14. Zoho People

• Feature: Automates employee onboarding, offboarding with People API (`/employees`).
  
• Sample: Automate POST for onboarding, PUT for status update.
  

15. Gusto

• Feature: Automates employee lifecycle with Employee API (`/v1/employees`).
  
• Sample: Automator triggers user add/delete via HRMS workflow.
  

16. Atlassian (Jira/Confluence)

• Feature: Automates user management with Admin API (`/rest/api/3/user`).
  
• Sample: POST user for new account, DELETE to deactivate.
  

17. Active Directory

• Feature: Automates with PowerShell scripts via LDAP API for add/remove/disabling accounts.
  
• Sample: Automator executes PowerShell `New-ADUser`, `Remove-ADUser`.
  

18. OneLogin

• Feature: Automates with API (`/api/2/users`).
  
• Sample: Triggered API calls for user create, update, suspend, delete.
  

19. Box

• Feature: Automates user access with Box Users API (`POST /users`, `DELETE /users/{user_id}`).
  
• Sample: Automation POST/DELETE based on business triggers.
  

20. HubSpot

• Feature: Automates team access with User Provisioning API (`/settings/v3/users`).
  
• Sample: Automated POST/DELETE for CRM account management.
  

Benefits

1. Automates repetitive onboarding/offboarding tasks, eliminating manual IT effort.

2. Centrally manages security compliance by automatedly removing access for ex-employees.

3. Automates scalable device-user associations and policy enforcement.

4. Reduces risk of orphan accounts via automated timely deprovisioning.

5. Accelerates employee productivity by automatedly provisioning all required resources.

6. Strengthens auditability, as all provisioning actions are automated and logged.