Identity lifecycle processes in CzechIdM 7

Everyone knows that an identity manager automatically handles access rights of users in connected systems. But how does it do that? CzechIdM 7 comes with a set of default processes that do the job. What are they about you will find out in the article.

Standardized processes

CzechIdM contains standardized lifecycle processes management for identities.

Default processes which provide basic automatic management of identities are:

  • Enabled contract – enable identity when its contracted position starts,
  • End of contract – remove roles, disable identity if last contracted position ends,
  • Contract exclusion – disable identity if contract is disabled, e.g. user started maternity leave.

Scheduling a process

All processes are implemented as long running tasks and operated by workflows. Thus:

  • its start can be easily scheduled in LRT agenda,
  • its progress and status can be overseen,
  • its history is audited in workflow history agenda,
  • new processes can be implemented and deployed easily.

Processes and organization structure

Except processes mentioned before you should know that

  • assignment,
  • change and
  • removal

of identity to/from work position (organization structure) is also supported in CzechIdM. It is managed by automatic roles feature.

Implementation of standard processes can be enhanced as well as new processes can be added to CzechIdM.

Read more

More details about HR processes in CzechIdM are in a section Identity lifecycle processes of Administrator’s guide. If you have any questions or comment feel free to comment on redmine, github or email me on Also join our google group to keep in touch with CzechIdM news.

About Marcel Poul

Vedoucí realizace IdM projektů, BCV solutions. Problematice správy identit se věnuje více než 8 let. Dodává projekty IdM pro zákazníky ve státní správě, soukromé firmy i velké nadnárodní korporace. V BCV solutions se také věnuje analýze potřeb zákazníků a rozvoji SW produktu CzechIdM.

Leave a Reply