This feature requires Admin or Automation Manager permissions.
Check the Workflow You Want to Create
Check which automation you want to achieve. No prior setup required: schedule ID updates, device alerts, webhook integration, custom workflows Prior setup required: automatic account provisioning for employee onboarding and offboardingAutomation Features Available Without Prior Setup
The following features let you set up and run a workflow simply by specifying a trigger and an action.| Feature (Template) | Trigger (Condition that starts the automation) | Main Action (Automated process) | Characteristics / Use Case |
|---|---|---|---|
| Schedule ID update | When a configured date/frequency (daily/weekly/monthly) or a condition such as contract start date is met | Retrieve, create, update, or delete an identity | Keeps user information up to date automatically based on a specific schedule. You can also use this to bulk-delete accounts with no connected services (0 services). |
| Device alert | When a specific device change or alert is detected | Notify an administrator, change a status, and more | Triggered by device events such as incidents, policy violations, or assignment changes, this immediately runs automated processing or sends a notification. |
| Webhook integration | When an event occurs on an external service (webhook received) | Process a user or run a specific action | Receives notifications from an external HR system or your own internal system to trigger a workflow in this service in real time. |
| Custom workflow (build from scratch) | Any trigger condition you configure | Any combination of actions | Lets you build your own automation flow with no prior setup, combining any trigger and action without relying on a template. |
Workflows That Require Prior Setup (Onboarding/Offboarding)
This workflow feature automates the addition of SaaS accounts when employees join. It also automates the deletion of accounts when employees leave. To run onboarding/offboarding automation (provisioning/deprovisioning), configure the following screens.-
Integrations (SaaS connections)
Connect the SaaS services you want to automate under Integrations > Integrations. See Connecting SaaS Services for details.
If a SaaS service is already connected, check its status under Integrations > Status. You can also navigate to Services > select a SaaS > Info > Workspace Status.
If the status is not “Synced”, refer to Troubleshooting SaaS Integration Failures.
SaaS-side requirements: The target SaaS must be connected with administrator permissions (including API permissions) required for account creation and deletion. Check the administrator permissions granted on the SaaS side.
- Pre-configuration for automations (mapping)
- Set up workflows: Setting up workflows for employee onboarding, Setting up workflows for employee offboarding
- Directory (configure trigger fields)
Creating and Publishing a Workflow
- Go to Automation and click [Create Automation].
- Select the template you want to use.
- In the builder screen, specify the Trigger and Action, click [Publish], and enter a name to complete the setup.
After publishing, confirm that the status (toggle switch) is ON (enabled) on the Automation list screen. The workflow runs automatically when its conditions are met.