Lifecycle
Automated offboarding: access closed on the termination date
Automated offboarding means that the termination date in the HR system disables the account, revokes sessions and releases licences, without a ticket. KoppelHet does this with Joinly as standard, which uses the date from AFAS, Visma Raet YouForce, Workday or another HR system to close access in Microsoft Entra ID and Active Directory.
What it is
Leaving is the step that goes wrong most often. The account stays open, the licence keeps running and nobody knows which applications the leaver used. That is exactly what an auditor asks: how do you know leavers and externals were closed off on time?
Offboarding is more than disabling the account. Think of the mailbox, the calendar, the laptop and permissions in applications outside Microsoft.
How Joinly handles it
- The termination date from HR starts a workflow: the account is disabled and active sessions are revoked.
- Microsoft 365 licences are released.
- The out-of-office is switched on with a reference to the manager, and the calendar is cleared.
- A ticket for collecting the laptop appears in TOPdesk or Freshservice.
- The mailbox is forwarded, archived or converted to a shared mailbox, as you define in the workflow.
- In an emergency, the emergency block disables the account at once, revokes sessions and resets MFA.
- If an action fails, Joinly retries automatically. Failing workflows show up on the dashboard.
What KoppelHet does
Offboarding is only as good as the termination date in HR. When setting it up, KoppelHet checks how that date is recorded, for example when the last working day differs from the contract end date or when a second contract continues. When the departure also has to reach payroll, an access badge system or an in-house application, we connect those too.
Joinly
Continue at Joinly
Joinly is KoppelHet's IAM software. joinly.app shows how the product handles this, with screens, pricing and a demo.
Common integrations
Visma Raet YouForce → Microsoft Entra ID
YouForce to Entra ID integration: Microsoft accounts and managers from Visma Raet
Personio → Microsoft Entra ID
Personio to Entra ID integration: Microsoft accounts that follow Personio
Workday → TOPdesk
Workday TOPdesk integration: Dutch employees and onboarding tickets from Workday
Frequently asked questions
What happens on the termination date?
The account is disabled, active sessions are revoked and group memberships and permissions lapse. Anything else, such as releasing the licence or converting the mailbox, you define in a workflow.
Can an account be closed temporarily during long-term leave?
Yes. On a leave record in HR a workflow can suspend the account, release licences and inform the manager and service desk, and reverse it on return.
What if someone has to leave immediately?
Then you use the emergency block: disable the account at once, revoke sessions and reset MFA. The action is logged with its reason.
How fast is a termination date from HR processed?
That depends on the import schedule you set: hourly, daily or weekly. After the import Joinly carries out the consequences straight away.
More on Identity and access management
Identity and access management: the overview
Lifecycle
- Joiners, movers and leaversAccounts, permissions and licences that follow employment.
- OffboardingAccess closed on the termination date, including mailbox, licences and laptop.
- Contractors and temporary accessContractors, interns, guest accounts and service accounts with an end date.
Roles and governance
Integrations
- HR as the sourceThe HR system decides who gets an account, with which data.
- Microsoft Entra IDAccounts, groups and licences in Entra ID from HR.
- Active DirectoryOn-premises AD and hybrid Exchange through an agent without an open port.
- Application provisioningAccounts and roles in your business applications, from HR.
- SCIM and SCIM GatewayThe provisioning standard, also for applications without SCIM.
Compliance and sectors
- NIS2 and the Dutch Cyber Security ActWhat the duty of care asks of access management, and what it does not.
- IAM in educationSchool board staff, ready for the IBP standards framework.
- IAM in governmentMunicipalities, provinces and water boards, with BIO and ENSIA.
- IAM in healthcareFlexible staff, multiple contracts and NEN 7510.