Managing identity feed

Edit online

IBM® Verify Identity feed facilitates in configuring and governing identity feed integration to manage employee identities through a HR management system.

Before you begin

Note: Identity feed is a requestable feature, VDEV-1620. To request this feature, contact your IBM Sales representative or IBM contact and indicate your interest in enabling this capability. You can also create a support ticket if you have the permission. IBM Verify trial subscriptions cannot create support tickets.
  • You must have administrative permission to complete this task.
  • Log in to the IBM Verify administration console as an Administrator. For more information, see Accessing IBM Verify.

About this task

Supported HR management system
  • Workday

The Identity feed feature helps configure and manage HR management systems such as Workday. The functionality helps continuously update and reflect changes in user identities, roles, and access permissions within an organization. The feed can include various types of information, such as new user accounts, updated user details, role changes, access grants, or revocations. It supports automated provisioning and de-provisioning processes, ensuring that access rights accurately follow user identity changes across the organization.

User synchronization
User data synchronization is the most essential process that helps manage the employee identities through the HR system. The following synchronizations are supported:
  • Full synchronization - It refers to a comprehensive, one-time or periodic synchronization process that aims to bring all user identities and their associated access rights from the target HR systems to IBM Verify. The process often involves provisioning new users, updating existing user details, assigning roles, and granting or revoking access rights as needed. It is recommended to run a full synchronization for the first data synchronization or if the data includes enormous user population.
  • Incremental synchronization - The process focuses on updating only the changes made since the last synchronization, rather than re-syncing the entire dataset. IBM Verify identifies and propagates only the new, updated, or deleted user identities and access rights information to connected HR system. Generally, timestamps are used to keep a check of time of modification.
  • Continuous synchronization - It refers to periodically updating user identities and access rights between the two systems. The process ensures that the changes are reflected at regular intervals.
  • Operational synchronization - The synchronization plays a crucial role in managing user identities during future hiring and employee terminations. During onboarding, the synchronization ensures the user account is created and provisioned. During termination, it facilitates the timely de-provisioning of user accounts and revocation of access rights.
Pre-hire offset
IBM Verify supports Pre-hire offset wherein you can mention a specific time period before a new employee's joining day during which their user account is provisioned in the organization.
Timezone-aware operation
The functionality enables to specifically onboard and terminate employee according to the local time zone of the user identity.

Procedure

  1. Log in as an administrator on IBM Verify. Navigate to the profile icon and click Switch to admin.
  2. Select Directory > Identity feed.

    If no previous identity feed configurations exist in the tenant, click the Create identity feed button to create a new configuration. For more information, see Creating identity feed integration.

    For identity feed configurations, the Identity feed screen displays the records in a tabular format, providing Type, Name, Enabled status and Description details.

  3. Click the menu icon to select from the Edit, Delete, and Sync now options.
    Note: The Sync now option is not applicable to identity feed configurations in Draft and Disabled mode.

What to do next

User data synchronization after configuring identity feed
  • Clicking the Sync now option opens the User data sync screen. By default, the Manual user sync triggers a full sync. The first sync should implicitly be executed as a full sync.
  • Select Upload CSV to browse and upload .csv file. To upload CSV, see Exporting Workday users to CSV for IBM Verify Upload for more details.
  • The CSV export timestamp is the time when the CSV file is exported from the HR management system. The timestamp is utilized by IBM Verify as the benchmark for future synchronizations. Checkmark the Include the time of CSV export checkbox to select the export time.
  • Click Sync to start the process. To view the user synchronization results, see User synchronization.