Auto-provisioning

Automatically creates user accounts for new employees and deactivates accounts when employments end.

How it works

The auto-provisioning job runs daily and performs two operations:

1. Provisions new users for employees whose employment starts on the run date
2. Deprovisions users whose employment ended the day before the run date

Configuration

To enable auto-provisioning, go to Admin › Workspace and enable Auto-provision users .

Provisioning new users

When an employee’s employment starts, the job creates a user account if:

• The employee has an email address set
• No user already exists for this employee
• No existing user or invitation uses the same email address

Invitation process

1. A user record is created with status “Invited”
2. An invitation email is sent to the employee’s email address
3. The employee clicks the link to set up their password and activate the account

Role assignment

Roles are automatically determined based on the employee’s position:

Roles are evaluated at the time of provisioning based on active employments on the start date.

Deprovisioning users

When an employee’s last employment ends, the job removes their access:

1. All active sessions are terminated (immediate sign-out)
2. The user account is deleted

When deprovisioning occurs

• The employment end date has passed (job runs the day after)
• The employee has no other active employments starting on or before the next day
• This allows for seamless transitions between positions without losing access

What is preserved

• Employee record and personal data
• All historical time registrations
• Absence records and time bank history

The employee can be re-provisioned later if they return with a new employment.

Troubleshooting