Goal
Simployer HRM is the master system for person data and for creating users in EntraID. Email address and UPN are imported into Simployer HRM from EntraID.
Description
A new employee is created in Simployer HRM either with data from a recruit system or by entering data manually into the system.
During the onboarding process an AD user shall be created and changes updated. GraphQL from Microsoft Graph SDK is being used to create a user in AD.
The integration uses employment category to limit who should be transferred to EntraID. The customer adds a new employment category « Midlertidig ansatt (uten IT-tilgang)» and employees with this category will not be transferred to AD.
A user is created in a security group based on what company they are employed.
Email address is created according to this rule: Given Name.Sure Name@company.no. If this email -address exists an email will be sent to an email-address, we have agreed on. A password is created but will not be used since an invitation will be sent to the user. In this invitation the user is asked to create a password.
If the employee is deactivated in Simployer HRM, the user will be deactivated in AAD. If an enddate is set on a position the deactivation is done when the date is reached.
When from-date on a position is set the creation of the User in AD is done 10 days prior to the start-date.
An employee must have an active position in order to be created in AAD. The fields that are changed will be updated. Email address and UPN will not be updated. The master is always AAD for these fields.
If there are errors in the creation process, an email will be sent to an agreed email address. If a creation of an account in AAD is done manually the Employee ID and GUID from Simployer must be added to secure correct datasync.
The integration consists of 4 jobs:
AzureADPreparePersons which extracts data from Simployer HRM and put persondata in a Table Storage in Azure
AzureADExportPerson filters the records for update and creates/changes the user in AAD. In case of an error a record in an internal table is created. The integration with AAD is done by an Azuree Function
AzureADSendMail collects all warnings from the internal table and sends an email to the preconfigured address
ImportFromAzureAD imports UPN and email-address from AAD to Simployer HRM. The integration is done by an Azure Function.
Datafelter
SimployerFelt | EntraID | Comment | Microsoft Graph |
Ansattnummer | Employeeid |
| employeeId |
Fornavn | Given name |
| givenName |
Etternavn | Sure name |
| surname |
Fødselsdato | Cust1 |
| extensionAttributes1 |
Mobil primær | Mobilephone |
| mobilePhone |
Direktenummer | Office phone | Switch board phone | businessPhones |
E-post primær | User principal name | Is created according to specific rules (Given Name.Sure Name@company.no) |
|
E-post alternativt | Alternative e-mail | Private e-mail | otherMails |
Personalkategori | Cust2 |
| extensionAttributes2 |
Stilling | Job title |
| jobTitle |
Stilling eng. | Cust3 |
| extensionAttributes3 |
Fra |
| Account shal be created at startdat minus x days |
|
Til |
| Account shal be deactivated at 23:59 the end date |
|
Tilhørighet | Department |
| department |
Ansatt i | Company | Is being used to add the user into correct security group | companyName |
| Manager | The nearest leader for the employee
| manager |
GUID | Cust4 |
| extensionAttributes4 |
LogonPreferredCulture | Prefered language | Language | preferredLanguage |
| Display name | Complete name created by concatenating Given and Sure name | displayName |
| Street adress | Primary address from affiliate department | streetAddress |
| City | City from affiliate department | city |
NA | State | No corresponding value in Simployer |
|
| Postal code | Postal code from affiliate department | postalCode |
| Country | Country from affiliate department | country |
Cust1, ..2, ..3 and ..4 should be added to extensionAttributes/onPremisesExtensionAttributes.
Prerequisites
Only one employment with employment category
Employee-number must be unique
Group Name must be unique in AD and correlated weth legal department in Simployer HRM
A employment category for those who sould not be transferred to AD must be defined priori to the integration
Email addresses that should receive warnings and messages sent by the integration, must be defined
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article