HelloID
HelloID is the Identity and Access Management (IAM) solution from Tools4ever. The HelloID Target Connector connects HelloID Provisioning to the Access Management and Service Automation modules of HelloID. The integration gives users access to Single Sign-On (SSO), Self-Service products, and delegated forms. This article provides more information about the HelloID Target Connector, its capabilities, and the benefits it delivers.
What is HelloID?
HelloID is an IAM solution from Tools4ever that supports organizations in managing and securing digital identities and access rights. HelloID enables centralized management of user authentications, authorizations, and provisioning, streamlining the management of user accounts and access rights.
The IAM solution consists of several modules, each offering distinct functionality:
- Provisioning: Automates the process of creating, modifying, and deleting user accounts based on information from a source system.
- Service Automation: Streamlines common requests within the organization, such as access requests. It provides Self-Service capabilities and enables task delegation.
- Access Management: Provides users with fast and user-friendly access to all the applications they rely on.
It is important to note that the HelloID Provisioning module is completely separate, both technically and financially, from the Access Management and Service Automation modules. Using Access Management and Service Automation therefore requires a HelloID account. With this account, users can log in to HelloID and gain access to SSO integrations, Self-Service products, and delegated forms.
Access rights within HelloID are organized based on groups. These groups and user accounts for Access Management and Service Automation together form the HelloID Directory. The HelloID Directory is comparable to a system such as Active Directory and enables centralized management of users and their access rights.
Why is the HelloID Connector Useful?
Using HelloID Access Management and Service Automation requires a user account in HelloID. However, not all users within an organization are automatically assigned a HelloID account. The HelloID connector bridges this gap and makes it possible to provision these accounts automatically.
The HelloID connector, which is used exclusively as a target connector, supports integration with commonly used systems such as:
- AFAS
- TOPdesk
Further details about the integration with these source systems can be found later in this article.
HelloID Helps You With
Faster account provisioning: The integration automates user provisioning within HelloID, ensuring users automatically gain access to the Access Management and Service Automation modules at the right time. This eliminates manual effort and allows users to access the correct permissions more quickly.
Error-free account management: The integration elevates account management within HelloID and prevents errors. Missing user accounts and permissions can cause significant frustration and disruption. The integration also ensures that accounts are deactivated in a timely manner when employees leave, preventing unauthorized access. It ensures that users never have more rights than necessary, which reduces opportunities for attackers and strengthens your organization's digital security.
Improved service levels: Integrating the various modules of HelloID helps improve your service levels, enabling you to support users more efficiently. Users always have the right tools to perform their jobs optimally, which strengthens user satisfaction.
How HelloID Provisioning Integrates with Other HelloID Modules
HelloID exchanges information between HelloID Provisioning and the Access Management and Service Automation modules using the HelloID REST API. This requires the creation of an API key and secret within HelloID.
| Change in source system | Procedure in HelloID |
|---|---|
| New employee | When a new employee joins, HelloID automatically creates a HelloID account for the user. All attributes of the account are configurable. If configured, HelloID can automatically activate the account at the start of employment, which you configure in HelloID using business rules. |
| Employee data change | During employment, various employee data may change, such as display or login names. HelloID can update any information on a HelloID account at the attribute level. |
| Role change | When an employee's role changes, this may require different authorizations. HelloID automatically updates permissions in HelloID based on role changes recorded in your source system. |
| Employee offboarding | When an employee leaves, HelloID automatically deactivates the HelloID user account and notifies the relevant stakeholders. If configured, HelloID automatically deletes the HelloID account of the former employee after a defined period. |
HelloID also supports dynamic permissions, which always operate based on source data. Dynamic permissions enable the configuration of all department groups based on a single business rule, for example. HelloID identifies correlations between source data and the corresponding groups. Unlike standard non-dynamic permissions, dynamic permissions automatically adapt to the changing structure of your organization.
The integration also enables the automatic assignment of Self-Service products. HelloID can automatically assign a Self-Service product based on information from your source system. Note: automatic revocation of these products through HelloID is not supported, but can be configured manually or through the Self-Service product itself.
Connecting HelloID with Other Systems
You can integrate HelloID with various other systems, connecting source systems to HelloID and elevating the management of users and authorizations. Some common integrations include:
-
HelloID to AFAS integration: If the HelloID directory is your primary user directory and manages SSO, the UPN field in AFAS must be populated with the value from the HelloID directory. The HelloID provisioning integration can automate this process, streamlining the workflow, reducing manual effort, increasing efficiency, and minimizing the risk of errors.
-
HelloID to TOPdesk integration: The integration between HelloID and TOPdesk keeps both systems fully in sync, which is essential for SSO and other functionalities. This improves employee productivity and security while simplifying the management of user accounts and authorizations.
HelloID supports more than 200 connectors, offering a broad range of integration capabilities between HelloID and other source and target systems. The connector and integration catalog is continuously expanded to support all popular systems.
