How to Sync HR Data with tenfold

Importing workforce data directly from your HR system allows tenfold to detect staff changes and automatically trigger (de)provisioning workflows. New employees receive the exact privileges they need from day one, while terminated members of staff automatically have their access revoked. To help you import HR data, tenfold provides both direct integration with widely used HR software and an import plugin that can ingest data in CSV or SQL form.

Syncing HR Data With Out-of-the-Box Integrations

tenfold offers out-of-the-box integrations for widely used HR platforms such as Workday, Personio or SAP SuccessFactors. These no-code plugins take minutes to install and can be easily configured through our visual interface.

To set up your HR data sync, all you have to do is configure basic rules such as naming conventions and make sure that user attributes in tenfold map to the right fields in your HR database. Once your settings are finalized, tenfold will automatically pull the information it needs directly from your HR platform.

This recurring import ensures our governance platform stays up to date with any workforce changes and is always working off of the right data.

Syncing HR Data With our Import Plugin

If no out-of-the-box integration is available for your HR software, tenfold also provides the option to import HR data through CSV files, SQL databases or a REST API call using our import plugin.

With this approach, you first need to export the required data from your HR platform in a supported format before we can import it into our IGA solution. By setting up a recurring job such as a daily export/import, this process can also be automated to allow for continuous syncing of HR data.

Note: Both the import plugin and the out-of-the-box integrations for HR software require our Enterprise Edition to use.

Simulate Changes Before They Are Executed

Before you import HR data, tenfold allows you to simulate what would happen based on your current import rules and settings. This simulation mode allows you to troubleshoot any issues with field mappings or user attributes before committing to the import and messing up your database.

Safety Threshold for Bulk Changes

As an additional safeguard, our HR data import also provides a safety threshold for bulk changes. With this setting, any data imports that would trigger changes on more than X user objects require manual approval before they are executed.

The safety threshold prevents buggy data imports – such as CSV files where a column is left empty – from overwriting your entire IGA database.

Sync HR Data to Automate User Lifecycles

To provide appropriate access to all users, Identity Governance solutions like tenfold need accurate information about user roles and job functions. Pulling workforce data directly from your HR platform is the easiest way to ensure your IGA is working off up-to-date information – without the need to manually sync changes.

By detecting changes in your HR data set, tenfold can automatically trigger the required lifecycle workflows to onboard new users, tweak existing access or offboard terminated employees.

Onboard New Users

When your HR data import contains new entries, tenfold provides these fresh hires with the right level of access for their job. It does this based on the intended privileges you set for different departments, locations or job functions as part of your role-based access model.

By automatically provisioning new users with the right resources for their job, tenfold ensures that new employees have access to everything they need from day one, all while freeing your helpdesk from the busywork of manual onboarding.

Role and Department Changes

Changes in user attributes likewise trigger provisioning workflows in order to update access when responsibilities change. For example, if an employee transfers to another department, tenfold provides them with any new access rights they need while revoking any privileges associated with their old role.

Offboard Departing Employees

When a user leaves your organization, tenfold ensures their access is fully revoked across all IT systems. Swift and complete offboarding is essential to prevent unauthorized access to your IT environment, whether by former employees or attackers hijacking their orphaned accounts. Automated deprovisioning eliminates the risk of delayed or incomplete offboarding due to errors or miscommunication between departments.

Govern Identities & Data Access With Ease: Learn How tenfold Can Help

About the Author: Helmut Semmelmayer

As VP of Revenue Operations, Helmut Semmelmayer heads up marketing and channel sales at tenfold Software. A veteran with more than 15 years of experience in Identity & Access Management, Helmut uses our blog to share his in-depth knowledge of industry best practices and the technical foundations underpinning the administration of IT privileges.