HR as the source for identity and access management

What it is

The HR system is the first to know that someone starts, moves or leaves. If IAM does not use that data, IT retypes everything from an email or ticket. That goes wrong with name changes, second contracts and future start dates.

An HR integration for IAM needs more than an export. You decide which contract is primary, who the manager is, how a username is built and which email address goes back to HR.

How Joinly handles it

Direct connectors for AFAS, Youforce, Visma YouServe, Workday, SD Worx, Nmbrs, Loket, HR2day, BCS, Personio, SAP SuccessFactors, HiBob, ADP, Unit4 and BambooHR, among others.
Several HR sources at once are supported.
You decide how usernames and email addresses are built. The email address is written back to the HR system.
With multiple contracts Joinly determines the primary contract and the manager.
You choose the import schedule: hourly, daily or weekly.
A dry run gives an export of all provisioning actions before the integration goes live.
Existing accounts are recognised and matched, for example on employee number or UPN, instead of being created twice.

What KoppelHet does

This is KoppelHet's trade. We build HR integrations for organisations with 100+ employees and know the APIs of AFAS, YouForce, HR2day, Nmbrs, Workday and other HR systems. We know per system which data is available. If your HR system is not on Joinly's list: Joinly connects to almost any HR system with an API or a reliable export.

Common integrations

AFAS Profit → Microsoft Entra ID

Connect AFAS with Microsoft Entra ID

Visma Raet YouForce → Microsoft Entra ID

YouForce to Entra ID integration: Microsoft accounts and managers from Visma Raet

HR2day → Microsoft Entra ID

HR2day to Entra ID integration: Microsoft 365 accounts for care, education and childcare

Nmbrs → Active Directory

Nmbrs to Active Directory integration: accounts from the payroll records

Visma YouServe → Active Directory

YouServe to Active Directory integration: accounts that follow the personnel records

Personio → Microsoft Entra ID

Personio to Entra ID integration: Microsoft accounts that follow Personio

Frequently asked questions

Which HR systems does Joinly connect?

Among others AFAS, Youforce, Visma YouServe, Workday, SD Worx, Nmbrs, Loket, HR2day, BCS, Personio, SAP SuccessFactors, HiBob, ADP, Unit4 and BambooHR. The current list is on joinly.app.

Can Joinly use several HR systems at once?

Yes. Joinly supports several HR source systems at once, for example after an acquisition.

What if an employee has two contracts?

Joinly recognises it is the same person, determines the primary contract and the manager, and gives one account with the permissions of both jobs.

Are existing accounts created twice?

No. Joinly first imports what is in the directory and matches those accounts to the employees from HR.

More on Identity and access management

Identity and access management: the overview

Lifecycle

Roles and governance

Integrations

HR as the sourceThe HR system decides who gets an account, with which data.
Microsoft Entra IDAccounts, groups and licences in Entra ID from HR.
Active DirectoryOn-premises AD and hybrid Exchange through an agent without an open port.
Application provisioningAccounts and roles in your business applications, from HR.
SCIM and SCIM GatewayThe provisioning standard, also for applications without SCIM.

HR as the source for IAM: connecting the HR system to Joinly