Guide to Provisioning

9 Kudos

SailPoint's Provisioning service is designed to automate granting access to users, so they can have access to what they need, when they need it. Granting proper access for your users is a vital part of keeping your organization running smoothly and securely. But manually changing and tracking that access is difficult, time-consuming, and error prone. Automating this process reduces the time and effort required to maintain the security of your organization.

For details, see:

Overview
Administrators
Users
Source Owners
Documentation for Administrators
Configuring the Basics
Preparing for Provisioning
Configuring Provisioning Data
Tracking Provisioning Data
Integrating with Service Desk Applications
Documentation for Source Owners
Completing Provisioning Tasks
Troubleshooting Tasks

Overview

Provisioning helps you to:

Quickly and efficiently manage employees' access - Automatically grant your employees access as soon as they need it, ensuring minimal wait time and simplifying the onboarding process.
Monitor access to reduce the risk of insider threats - You can see what access is being granted every step of the way, so there's never any confusion about what's being given to a user or what they can access.
Improve productivity by ensuring access and automating manual processes - Our automated provisioning services ensure that your work gets done when it needs to, while decreasing the burden on IT.

IdentityNow allows you to effortlessly manage employees' access based on factors that affect what they're going to need - such as their hiring status within your company and their job's requirements. You can configure IdentityNow to track changes in any of these factors and adjust employees' access accordingly.

Administrators

Granting and revoking access on sources is easy with IdentityNow. By configuring lifecycle states and roles for your employees that represent the statuses and job functions in your company, you can ensure that users have access to what they need when they need it.

Lifecycle states give you the power to control what a user can access in each stage of employment. For example, new employees get the Pre-Hire lifecycle state, which grants them only limited access. On day one, the users become Active, and they get a full set of privileges. You can create as many lifecycle states as you need to reflect your organization's needs.

While lifecycle states correspond to broad sets of access, IdentityNow's roles oversee granular access. Roles are designed to correspond with individual job titles within your organization, so if any of your employees move departments or change jobs, you can adjust their access automatically.

Users

Most of the time, your users won't notice IdentityNow granting them access behind the scenes. However, they might notice an improvement in the amount of time it takes them to get what they need if their job title changes. The onboarding process might shorten as users are granted access automatically. And because IT is no longer caught up with manual efforts, they can answer users' questions and meet other needs faster.

Source Owners

Most of the time, IdentityNow can automatically grant and remove entitlements. However, when it can't, IdentityNow saves you time by creating a task for the owner of a source that tells them to create an account or edit entitlements on a source. This simplifies the process of granting accounts by giving source owners all of the information they need in a single place.