Lifecycle

Automating joiners, movers and leavers from HR

Automating joiners, movers and leavers means that a change in the HR system itself creates the account, adjusts permissions on a job change and removes access on departure. KoppelHet does this with Joinly as standard, which connects AFAS, Visma Raet YouForce, Nmbrs, Workday and other HR systems to Microsoft Entra ID, Active Directory and your applications.

Last updated: 28 September 2026

Identity Lifecycle Management at Joinly All about IAM

What it is

Identity lifecycle management revolves around three moments. For a joiner the account is ready before the first working day, with the right groups and licences. For a mover the old permissions are removed and the new ones added. For a leaver access closes on the end date.

Without an integration IT hears about it late or not at all. Permissions pile up with every job change, and leavers' accounts stay active.

How Joinly handles it

Joinly reads new employees, changes and termination dates from the HR system. HR is the single source.
Accounts, groups and licences in Microsoft Entra ID and Microsoft 365, and in on-premises Active Directory through the Joinly Agent.
On a job or department change old permissions are removed, new ones added and the manager updated.
Workflows start the follow-up steps, such as a welcome email to the private address, the first password by text message and a TOPdesk ticket for the laptop.
If someone is not in HR or it has to happen now, you create or offboard the employee manually in Joinly.
A dry run shows in an export which actions the integration would perform, before anything is written.
Every lifecycle action is written to the audit log.

What KoppelHet does

KoppelHet knows the HR side: which fields the HR system provides, how a future start date or a second contract is recorded, and where the data is messy. We use that knowledge when setting up Joinly. When the same change also has to reach payroll, facilities or the service desk, KoppelHet connects those systems too.

Joinly

Continue at Joinly

Joinly is KoppelHet's IAM software. joinly.app shows how the product handles this, with screens, pricing and a demo.

Identity Lifecycle Management at Joinly

Joinly workflows

Common integrations

AFAS Profit → Microsoft Entra ID

Connect AFAS with Microsoft Entra ID

Visma Raet YouForce → Microsoft Entra ID

YouForce to Entra ID integration: Microsoft accounts and managers from Visma Raet

Nmbrs → Microsoft Entra ID

Nmbrs to Entra ID integration: Microsoft accounts from the payroll records

Workday → Microsoft Entra ID

Workday to Entra ID integration: Microsoft accounts for the Netherlands from global HR

HR2day → Active Directory

HR2day to Active Directory integration: accounts per school or location from HR

Frequently asked questions

What is the difference between joiners, movers and leavers?

A joiner is a new hire, a mover changes job, department or contract, and a leaver departs. Each moment needs different actions on the account, the permissions and the licences.

Can someone who is not in HR get an account too?

Yes. In Joinly you create or offboard an employee manually, for example for contractors or in an emergency. An end date is mandatory for externals.

Does this work with on-premises Active Directory?

Yes. Joinly reaches on-premises Active Directory through the Joinly Agent, a service in your own network that only makes outbound connections.

When does KoppelHet build a custom integration?

When the HR change also has to reach systems outside IAM, such as payroll, facilities or an in-house application. We tell you in the intake which route fits.