Skip to main content

User Provisioning and Deprovisioning

This section explains how to manage user identities effectively using structured provisioning workflows and registration types.

Provisioning Workflow - Internal Users​

  • Identity IIQ manages the end-to-end workflow for all joiner/mover/leaver processes for internal users​
  • Data flows include HR data from Workday/PMDM

Provisioning Workflow - External Users​

​During the phase of migration, there is co-existence between GUM & EntraID as far as external user registrations are concerned. You can create external users in GUM which are synced up to EntraID or you can invite external users/guest accounts in EntraID directly. ​

GUM supports two registration methods:

  • Self-Registration
    • For untrusted users ​
  • PwC Managed Registration​
    • For trusted users ​
  • Entra ID supports redemption-based invites for external/guest accounts. ​

Refer to Section 2.0 of the Group User Management (GUM2) Guide for detailed instructions.​

Refer to Section 2.0 of the Identity as a Service (IDaaS) Technical Integration & Migration Guide for detailed instructions.

Recommendations​

  • Internal & External user data is managed as part of IAM lifecycle​
  • If applications are maintaining user data as part of their application needs: ​
    • Implement automated deprovisioning workflows to remove inactive or obsolete accounts. ​
    • Align provisioning and deprovisioning processes with compliance and audit requirements.