User Management Resource Administrator

Automation Module

User Management Resource Administrator AUTOMATION offers user provisioning synchronization across Active Directory, UNIX, Novell, and many other information systems eliminating duplicate work in multiple systems. This will, for example, allow a change made in your Human Resources Information System or Student Information System to be updated in Windows Active Directory, like a name change, a promotion, a department restructuring, or someone leaving the company or school.
 

Top 5 Reasons to Download AUTOMATION Module:

• Real-Time Data Synchronization: synchronize between HR/SIS systems and your directory systems
• Increased Security: when an employee is de-provisioned in one-database, he/she is de-provisioned in all of them automatically, eliminating the risk of former employees gaining access to systems once they leave the company
• Increased Efficiencies: reduces duplicate work between IS and HR, changes in the HR database are automatically loaded into Active Directory at pre-defined intervals (hourly, daily, weekly, etc)
• Return on Investment: audit and management control of information and elimination of duplicate work
• Auditing: enables enhanced database logging for auditing and reporting purposes: Sarbanes-Oxley, HIPAA, etc

Automation of- HR Information Systems to Active Directory

User Management Resource Administrator AUTOMATION is a user provisioning software that allows IT administrators to seamlessly integrate their human resource information systems with Active Directory (or other directory systems: Novell, Linux, etc.). This will allow complete user provisioning and user de-provisioning at the time of hire or dismissal. AUTOMATION allows information systems to easily connect to Active Directory by using COM (VBA, VB, ASP, etc) or a Command Line Interface. The AUTOMATION module eliminates duplicate work and possible data entry errors in when working with multiple systems, (HR Database, Phone System, Payroll Database, Active Directory, etc.) as soon as a change is made in one system, it is made in all systems at a pre-defined interval. When an employee is hired and entered into the HR information system they are automatically provisioned in Active Directory: assigned to the appropriate OU, workgroup, create the exchange account, etc. As soon as the employee leaves the company they are automatically de-provisioned and their account is removed from Active Directory.
 

Example
An employee leaves the company; the information is updated in PeopleSoft Enterprise (one of many HR information systems) by Human Resources and is then automatically processed in Active Directory and other directories and applications. This ensures that former employees cannot gain access to the company network after their departure.

The challenge
User Account Information is stored and maintained in multiple information systems before it is entered or changed in Active Directory or another user directory. Organizations re-enter the information repeatedly from one database to another, resulting in costly labor overhead and out of sync account information – this process generally leads to errors across systems as well as overall system pollution.

The solution
Many companies would consider developing complicated scripts or internally developing a custom application that would act as an Identity Management System – linking your Information Systems together and acting as a hub for all data entry. These options are costly and time consuming, almost always taking longer than expected to implement, and in the end, these solutions may not be immediately compatible with Active Directory.

With the UMRA AUTOMATION solution you need only set up the interface once and define the mapping between the account information and the structure of your Active Directory (e.g. OU structure, group memberships, account naming conventions, etc.). This can easily be achieved, or if you have a complex Active Directory structure, one of our consultants can support you. This mapping is done using an easy drag-and-drop graphical interface and does not require any ADSI or Active Directory knowledge at all. Once complete any changes made in your Human Resources Information system will be updated in your Active Directory, this can be done on a pre-schedule basis or run on a manual basis, making your Human Resources department responsible for maintaining the quality of end-user information in all information systems within your network and easing the load on both the network administrator and on the helpdesk. 

Automation of Student Information Systems to Active Directory

User Management Resource Administrator AUTOMATION is a user provisioning software that allows IT administrators to seamlessly integrate their student information systems with Active Directory (or other directory systems: Novell, Linux, etc.). This will eliminate any duplicate work in multiple systems; as soon as a student is added to your SIS they are automatically provisioned in Active Directory: assigned to the appropriate OU, workgroup, the exchange account is created (or other e-mail system), etc. As soon as a student leaves the school or graduates, they are automatically de-provisioned and their account is removed from Active Directory.

Example
It is June, you need to clean up your Active Directory, remove all of the students that graduated during the previous year and add all of the incoming students for the upcoming school year. The updates are made in your Student Information System, Zangle for instance, and then they are automatically processed in Active Directory. This ensures that former students no longer have access to your systems and that new students are correctly provisioned with their home directories, Exchange accounts, usernames and passwords all in one automated process.

The challenge
User Account Information is stored and maintained in multiple information systems before it is entered or changed in Active Directory or another user directory. Organizations re-enter the information repeatedly, resulting in costly labor overhead, data entry errors, and out of sync account information (when using manual procedures –this will lead eventually to system pollution).

The solution
You may consider writing scripts to assist with the management of accounts; if, however, these scripts are developed internally and that developer leaves, maintaining the scripts can become increasingly complicated and overbearing. Another option is to purchase an Identity Management System, but this will take a long time (weeks or even months) to implement – time you do not have with the new school year quickly approaching. With both of these solutions you will most likely be confronted with technical issues concerning connectivity with Active Directory.

With AUTOMATION you only need to set up one interface and define the mapping between the account information and the structure of your Active Directory (e.g. OU structure, group memberships, account naming conventions, etc.). This can be easily achieved depending on the complexity of your Active Directory. You can do this yourself or one of our technical consultants will support you. This mapping is done using an easy drag-and-drop graphical interface and does not require any ADSI or Active Directory knowledge at all.

Any changes made in your SIS or in your Active Directory can be pre-programmed to run at a scheduled time or run manually as changes are made live in either system. AUTOMATION also provides a complete audit trail and reporting capabilities as well.