Hybrid AD - solution

Modified on Tue, 11 Mar at 9:34 AM

Integration and prosess AD

1.New, changed and deactivated employee in Simployer HRM are sent to a file.

Customer must create an sFTP and share url, user and password to the area.

2. Manual update of users in On Prem AD

3. Users are synchronized / federated to Azure AD. (It is normally a delay for 30 minutes)

4. The integration framework does a request to AAD through Microsoft Graph, and updates email and external ID in Simployer HRM

It will only be users with account information in Simployer HRM that will be sent in the email / to the file. It is possible to enter data for employees who nor should have access to Simployer either AD.

Employee-data that is transferred is new, changed or deleted. Status “Ny” is based on “eksternID” with no value in Simployer.

The integration jobs are scheduled and runs once a day.

Employee information in the file:

Felt	Kommentar
AnsattIFirma	Company
Ansattnr	Employee number
Avdkode	Department ID
Tittel	Tittel
Fornavn	Given name
Etternavn	Sure name
Adresse	Street address
Postnr	Postal code
Poststed	Postal name
Epost	Email address
Mobil	Mobil
Ekstern ID	UPN from Azure AD
Personguid	Ident used to attach users from Azure AD
Fromdate	Fromdate
Enddate	Last Enddate
Leader	Nearest Leader
Status	Ny - New user Endret - Name or email is changed Deaktivert – User is deactivated in Simployer

Prerequisite

A preliminary import-job must be done to set «eksternID» on existing employees in Simployer

Customer must create an sFTP and share url, user and password to the area.

Establish application access with read access to all users in Azure AD (User.Read.All)

personguid must be stored in Azure AD and be accessible for export through Microsoft Graph