Skip to main content

Example: User flagged as a rehire on a SoR

This example uses the Scenario.im_corp_detect_automated_rehire scenario. In this use case a user is flagged as a rehire from a Source of Records.

Requirements

This example assumes that:

  • Bravura Identity and Connector Pack are installed.

  • An Active Directory target is configured and is a source of profiles.

  • A HR target is configured as a Source of Records.

Configure the scenario

  1. Log in to Bravura Identity as superuser.

  2. Install the Scenario.im_corp_detect_automated_rehire scenario.

    This scenario component will detect rehires being submitted from the source of records and submit follow up requests for an implementer to review the new user being onboarded.

  3. Click Manage external data store to verify the following tables are available. The tables are pre-configured, however, may require some customization for your environment:

    • hid_global_configuration to configure rehire parameters.

    • hid_policy_request_chain to submit a request to review new the hire.

    • im_policy_authorization to set authorization on the require detection request.

    • im_policy_detect_rehire to set rehire detection criteria.

    • im_policy_implementers to set implementers to review the potential rehire.

  4. Customize PDRs as needed.

    The following PDRs have been pre-configured for the termination scenario. You may want customize to your needs; for example, edit the access control or change the operations.

    • REHIRE Used to enable user accounts after they have been terminated. This pre-defined request is valid if the user is allowed to be rehired.

    • NEW-EMPLOYEE

  5. Complete a scheduled termination of a user.

Attempt a rehire

  1. Add an account in Source of Records (SoR) target.

  2. Execute auto discovery.

    A request is submitted and a child request is submitted for review.

  3. Log in to Bravura Security Fabric as a request implementer.

    HR systems are usually set as read only targets and require an implementer to complete tasks as opposed to a connector automatically completing the task.

  4. Verify that there are pending requests open to implement.

In this section: