EmpowerID provides a wizard for onboarding people with different options for the onboarding process. Options include:
Create Person Simple Mode – This option allows non-technical users to initiate creating a new person, requiring minimal information to be supplied, such as the new person's First Name, Last Name, and primary Business Role and Location.
Create Person Advanced Mode – This option requires more information and provides more configuration options, such as assigning the new person to one or more Management Roles and groups.
Create Person From Another Mode – This option allows you to create a person using another person as a template for the new person.
The workflow used to onboard people is the OnboardPerson workflow. This workflow has a number of parameters that you can configure to alter the fields that appear when onboarding people, as well as settings that determine whether human approval is required before EmpowerID fulfills the request and provisions the person. These parameters are listed in the below table.
Parameter | Description |
|---|---|
CreationModeListDataItemTypeName | This is a list that contains the available modes for onboarding people. |
EmailMessageIdForMgtRoles | Integer that specifies the email message to be sent to all members belonging to the target Management Roles. |
EmailMessageIdForNewPerson | Integer that specifies the email message to be sent to the newly onboarded person. |
EmailMessageIdForPersonManager | Integer that specifies the email message to be sent to the manager of the newly onboarded person. |
IsAssignGroupMembership_IsVisible | Boolean value that determines whether the Assign Group membership section of the workflow is visible to users. |
IsAssignMgmtRoleBundleMembership_IsVisible | Boolean value that determines whether the Assign Management Role Bundle Membership section of the workflow is visible to users. |
IsAssignObjectVisibilityAccessRoles_IsVisible | Boolean value that determines whether the Assign Visibility Access Role section is visible to users. |
IsAssignPreApprovedMgmtRole_IsVisible | Boolean value to determine whether the Assign Pre-Approved Management Roles section of the workflow is visible to users. |
IsAssignRbacOperationAccessRoles_IsVisible | Boolean value to determine whether the Assign RBAC Operation Access Roles section of the workflow is visible to users. |
IsAssignSecondaryRoleAndLocation_IsVisible | Boolean value to determine whether the Assign Secondary Role and Location section of the workflow is visible to users. |
IsAssignUIAccessRoles_IsVisible | Boolean value that determines whether the Assign UI Access Roles section of the workflow is visible to users. |
IsAutoGeneratePassword_IsVisible | Boolean value that specifies whether the Auto Generate Password option is visible to users. |
OnboardPersonCreationMode_ItemSetName | Specifies the List Item Set Name containing the creation modes presented to users running the workflow. |
OnboardPersonPropertiesToClone | Specifies the properties to clone from a selected person to the new person when running the workflow in
|
PersonPropertiesToClone | Specifies the properties to clone from a selected person to the new person when running the workflow in
|
SendForApproval | Boolean value that specifies whether the onboarding request needs to be routed for human approval before the systems provisions the new person. |
Step 1: Configure workflow parameters
The workflow for onboarding people is OnboardPerson. The workflow has several parameters that affect how the workflow behaves and the amount of fields that appear to users when in a particular mode. These parameters are listed in the below table. In this example, you set the DefaultAzureTenantID parameter to the Azure tenant where applications are to be created.
Onboard people
On the navbar, expand Identity Administration and select People.
In the Actions pane of the Find Person page, click the Onboard Person action.
This initiates the Onboard Person workflow.
Select the desired creation mode and follow the wizard to onboard the new person.