Identity and access management

Accounts and access automatically from the HR system

Give new starters access on time, process changes automatically and disable accounts when people leave. We connect HR to Entra ID, Active Directory and other identity systems, according to your naming and access rules. We agree which accounts, groups and licences are managed in advance.

Topics

Everything about identity and access management

Identity and access management (IAM) decides who gets an account, which access comes with it and when it goes away again.

Lifecycle

Accounts that are created, change and disappear with employment.

Roles and governance

Who gets which access, which combinations are not allowed and how you prove it.

Integrations

The HR system as source, Entra ID and Active Directory as target, and the applications behind them.

Compliance and sectors

What NIS2 and sector standards ask of access management.

Joinly

KoppelHet builds HR integrations. For IAM our standard is Joinly, the IAM software from the same makers. Joinly takes the HR system as its source and manages accounts, roles and access in Microsoft Entra ID, Active Directory and applications. When the same HR change also has to reach systems outside IAM, such as payroll or facilities, KoppelHet connects those as well.

Go to joinly.app

The situation

IT hears about a new colleague when they are already at the door, and about a leaver when the account has been active for weeks. HR already records everything in the HR system; it just does not reach IT automatically.

International: Global HR system, local Microsoft tenant.

What the integration does

  • Create the account before the first working day
  • Attributes such as job title, department, manager and employee number
  • Groups and licences based on department or job
  • Block the account on the last working day

Edge cases we handle

  • Duplicate names and name changes
  • Contractors and externals not in HR
  • Hybrid environment with on-premises AD and Entra ID
  • Rehires with an old account

Integrations for this process

  • Enterprise HR, International mid-market HR, Dutch HR and payroll, Global payroll, Nedap ONS to Directory and IGA

Which systems we connect

649 possible combinations. System not listed? Ask us.

Workday
Nmbrs
Visma Raet YouForce
HiBob

Find your system in the catalogue

Customer cases

How it runs at customers

How these organisations use the integration. The configuration differs for each customer.

DAEL Groep logo

DAEL Groep

Installation engineering

AFAS is the source for Active Directory and Entra ID. Accounts, email addresses and groups are created, updated and deactivated automatically based on HR changes.

“Thanks to KoppelHet's user comparison between the HR system and our AD, we quickly saw where AFAS and Microsoft differed.”
Wilvert Blaauwendraad, ICT manager
Read the customer story
Fokker Services Group logo

Fokker Services Group

Aviation

Fokker Services Group uses AFAS as the source for Active Directory and Entra ID. Staff at the Singapore entity are kept in Unit4 HR; a second integration puts them into AFAS, so they get an account through the same route.

Read the customer story
Tabijn logo

Tabijn

Education

Tabijn uses HR2Day as the source for Entra ID, and Entra ID as the source for ESIS. New staff get an account automatically, leavers are deactivated, and in ESIS everyone gets access to the schools where they work.

Read the customer story

Frequently asked questions

Is this the same as Joinly?

Joinly is the IAM software from the same makers, for organisations looking for a complete IAM product. KoppelHet builds the integration itself and fits it to your process.

Does it work with on-premises Active Directory?

Yes. An agent in your own network executes the changes. It makes an outbound connection, so no ports need to be opened.

What if data in HR and AD does not match today?

We start with a comparison between HR and the directory. It shows per employee what differs, so you fix the basics before the integration goes live.

Which systems do you want to connect?

Tell us which systems you use and what should happen automatically. Together we define the smallest working solution, with a clear design and a quote before building.