Integrations
Managing Microsoft Entra ID from the HR system
You manage Microsoft Entra ID from HR by letting a layer above Entra drive accounts, groups, licences and permissions from the data in the HR system. KoppelHet does this with Joinly, which connects AFAS, Visma Raet YouForce, Workday and other HR systems to Entra ID through Microsoft Graph, for cloud-only and hybrid environments.
What it is
Entra ID is the identity platform, but it is not built for day-to-day administration in a growing organisation. Onboarding, a role change or offboarding takes steps in several portals, and many teams solve that with PowerShell scripts. In a hybrid environment with on-premises Active Directory, duplicate processes come on top.
Joinly does not replace Entra ID. Entra remains the identity provider. Joinly decides who gets which roles and runs the lifecycle.
How Joinly handles it
- Joinly reaches Entra ID through Microsoft Graph, with its own app registration in your tenant.
- Create, update, bulk-create, activate and deactivate accounts.
- Add members to and remove them from Entra and Exchange groups, based on role or condition.
- Microsoft licences follow the role and are released on departure.
- Reset passwords, issue a Temporary Access Pass for the first sign-in and revoke sessions.
- Guest accounts in Entra ID get the same lifecycle, with an end date.
- Works cloud-only and hybrid with on-premises Active Directory.
- You enforce MFA in Entra ID. Joinly handles MFA resets and logs who performed them.
What KoppelHet does
KoppelHet knows per HR system how the integration with Entra ID runs: which fields go across, how the manager is determined and which naming choices you make up front.
Joinly
Continue at Joinly
Joinly is KoppelHet's IAM software. joinly.app shows how the product handles this, with screens, pricing and a demo.
Common integrations
| Integration | KoppelHet | Joinly |
|---|---|---|
| AFAS Profit → Microsoft Entra ID | View integration | joinly.app |
| Visma Raet YouForce → Microsoft Entra ID | View integration | joinly.app |
| Workday → Microsoft Entra ID | View integration | joinly.app |
| HR2day → Microsoft Entra ID | View integration | joinly.app |
| Nmbrs → Microsoft Entra ID | View integration | joinly.app |
| Personio → Microsoft Entra ID | View integration | joinly.app |
| HiBob → Microsoft Entra ID | View integration | joinly.app |
| SAP SuccessFactors → Microsoft Entra ID | View integration | joinly.app |
Frequently asked questions
Does Joinly replace Microsoft Entra ID?
No. Entra ID remains the identity provider. Joinly is the management layer that decides who gets which access and runs the lifecycle.
Does it work in a hybrid environment?
Yes. The same HR source can feed Entra ID and on-premises Active Directory at the same time. Active Directory runs through the Joinly Agent.
Is Entra ID enough for NIS2?
Entra ID handles authentication and identities, but does not provide compliance evidence by itself. NIS2 asks you to show why someone has access and that every change is traceable. Joinly adds that layer.
More on Identity and access management
Identity and access management: the overview
Lifecycle
Roles and governance
Integrations
- HR as the sourceThe HR system decides who gets an account, with which data.
- Microsoft Entra IDAccounts, groups and licences in Entra ID from HR.
- Active DirectoryOn-premises AD and hybrid Exchange through an agent without an open port.
- Application provisioningAccounts and roles in your business applications, from HR.
- SCIM and SCIM GatewayThe provisioning standard, also for applications without SCIM.
Compliance and sectors
- NIS2 and the Dutch Cyber Security ActWhat the duty of care asks of access management, and what it does not.
- IAM in educationSchool board staff, ready for the IBP standards framework.
- IAM in governmentMunicipalities, provinces and water boards, with BIO and ENSIA.
- IAM in healthcareFlexible staff, multiple contracts and NEN 7510.