On/Offboarding
Despite frequent hiring and resignation
Ready to respond
Accounts are assigned repeatedly upon entry and exit
It can reduce the time taken for recovery.
Request a Demo It can reduce the time taken for recovery.
Feature 1
Directory synchronization and
User provisioning
There is no need to log in to each SaaS, go to the admin page, click on account management, add new employees, search for employees who have left the company, and cancel the account. If you use Google Workspace or Active Directory, you only need to manage the main directory.
Connecting apps to your main directory, primarily SaaS used by all employees, makes repetitive account granting and revocation tasks much easier. For example, if you create an account in Google Workspace and link it to your directory, a user account will automatically be created in Slack.
Apps that are not connected to the main directory are managed using user provisioning. This is a method in which accounts created in PoPs are automatically reflected in the corresponding apps. This reduces the hassle of having to log in to the SaaS admin account one by one to assign accounts.
Connecting apps to your main directory, primarily SaaS used by all employees, makes repetitive account granting and revocation tasks much easier. For example, if you create an account in Google Workspace and link it to your directory, a user account will automatically be created in Slack.
Apps that are not connected to the main directory are managed using user provisioning. This is a method in which accounts created in PoPs are automatically reflected in the corresponding apps. This reduces the hassle of having to log in to the SaaS admin account one by one to assign accounts.
feature 2
Onboarding and offboarding that requires nothing from employees
If our organization's SaaS is connected to PoPs, management points are gradually reduced. Onboarding employees can start working right away by opening the PC they received on their first day. The administrator has already set up the SaaS that is suitable for the job, so they only need to log in with SSO.
Likewise, employees who leave the company will lose access to all connected SaaS simply by deleting the PoPs account they are currently using. There is no need to monitor whether they can actually access or not. It is convenient for managers, new employees, and former employees.
If user provisioning or directory synchronization is not possible in your environment, set up a notification so that the person in charge or manager of the workspace to which the former employee belongs can block access.
Likewise, employees who leave the company will lose access to all connected SaaS simply by deleting the PoPs account they are currently using. There is no need to monitor whether they can actually access or not. It is convenient for managers, new employees, and former employees.
If user provisioning or directory synchronization is not possible in your environment, set up a notification so that the person in charge or manager of the workspace to which the former employee belongs can block access.
faq
Frequently Asked Questions
Feature
Why is directory synchronization useful?
Administrators do not need to manually set up directories one by one. For example, if our organization (company) uses Google Workspace or Microsoft 365, we can import the directory as is and apply it to PoPs. In addition, we can set the synchronization scope so that only specific organizations can be synchronized.
How can we automatically provision users to identify the SaaS they use in their enterprise?
It depends on whether the SaaS provides the corresponding API. Apps that provide user provisioning functionality can view, invite, add, activate, delete, and deactivate users. Apps that provide user provisioning APIs can view the user list in the admin console, so that you can compare it with the organization's user list. Even if the administrator does not assign or de-assign users, user provisioning is automatically performed through directory synchronization to the organization that assigns the app.
I have a former employee. I want to reclaim all app assignments immediately. What should I do?
You can automatically revoke permissions. Depending on the situation in your organization, you can also set up policies such as: Notify the departure and deprovisioning administrator (Org Admin, App Admin, License Admin, Manager) → Notify the SCIM Admin → Assign (determined by team-organization/group, job)
Onboarding and offboarding also become easier.
Reduce the time spent on repetitive account creation and recovery upon joining or leaving the company.
Request a Demo 
Response within 3 business days
Demonstrating SaaS integration and management within an organization
