Lifecycle

Automated offboarding: access closed on the termination date

Automated offboarding means that the termination date in the HR system disables the account, revokes sessions and releases licences, without a ticket. KoppelHet does this with Joinly as standard, which uses the date from AFAS, Visma Raet YouForce, Workday or another HR system to close access in Microsoft Entra ID and Active Directory.

What it is

Leaving is the step that goes wrong most often. The account stays open, the licence keeps running and nobody knows which applications the leaver used. That is exactly what an auditor asks: how do you know leavers and externals were closed off on time?

Offboarding is more than disabling the account. Think of the mailbox, the calendar, the laptop and permissions in applications outside Microsoft.

How Joinly handles it

  • The termination date from HR starts a workflow: the account is disabled and active sessions are revoked.
  • Microsoft 365 licences are released.
  • The out-of-office is switched on with a reference to the manager, and the calendar is cleared.
  • A ticket for collecting the laptop appears in TOPdesk or Freshservice.
  • The mailbox is forwarded, archived or converted to a shared mailbox, as you define in the workflow.
  • In an emergency, the emergency block disables the account at once, revokes sessions and resets MFA.
  • If an action fails, Joinly retries automatically. Failing workflows show up on the dashboard.

What KoppelHet does

Offboarding is only as good as the termination date in HR. When setting it up, KoppelHet checks how that date is recorded, for example when the last working day differs from the contract end date or when a second contract continues. When the departure also has to reach payroll, an access badge system or an in-house application, we connect those too.

Joinly

Continue at Joinly

Joinly is KoppelHet's IAM software. joinly.app shows how the product handles this, with screens, pricing and a demo.

Offboarding automation per HR system at Joinly

Common integrations

Frequently asked questions

What happens on the termination date?

The account is disabled, active sessions are revoked and group memberships and permissions lapse. Anything else, such as releasing the licence or converting the mailbox, you define in a workflow.

Can an account be closed temporarily during long-term leave?

Yes. On a leave record in HR a workflow can suspend the account, release licences and inform the manager and service desk, and reverse it on return.

What if someone has to leave immediately?

Then you use the emergency block: disable the account at once, revoke sessions and reset MFA. The action is logged with its reason.

How fast is a termination date from HR processed?

That depends on the import schedule you set: hourly, daily or weekly. After the import Joinly carries out the consequences straight away.

More on Identity and access management

Identity and access management: the overview

Which systems do you want to connect?

Tell us which systems you use and what should happen automatically. Together we define the smallest working solution, with a clear design and a quote before building.