Entra ID onboarding and offboarding, automated
TechRam automates Microsoft Entra ID onboarding and offboarding so one HR event does the whole job. The account is provisioned with the right access from day one, HR, IT and L&D each get an assigned task, and offboarding runs in reverse with access revoked on the last day. At Achieve Australia it recovered 120 hours a month.
Where onboarding usually breaks
Not in Entra ID. In the hand-offs around it. HR enters the new starter in one system, IT provisions the account separately, someone else sends the induction pack, and nothing confirms that every step happened. Steps get missed, people arrive on day one without access, and leavers keep theirs. Credentials end up passed around over email and Teams, which is a breach risk however carefully people behave.
What the pipeline does
- One HR event starts it, with no second entry anywhere
- The role sets the access profile, and Entra ID provisions the account, licences and groups to match
- Device setup runs through Intune actions
- HR, IT and L&D each get an assigned task with an owner and a deadline
- Offboarding runs the same logic in reverse, from one event
- Every step is logged and timestamped, ready for an audit
At Achieve it runs on Azure Functions and Service Bus, creating accounts through Microsoft Graph, inside Achieve’s own Azure tenant. The catalogue entry is Worker Onboarding & Offboarding.
What it did at Achieve Australia
Thirty onboarding and offboarding events a month, across three teams and three systems. After six months in production, 120 hours a month and $126K a year had come back, onboarding one person went from four hours to 15 minutes, and the audit trail the auditors had asked for existed without anyone building it. Read the Achieve result →
Common questions
01. Do we have to replace our HR or recruitment system?
No. The pipeline connects the systems you already have. At Achieve Australia that was JobAdder for recruitment, ELMO for HR and payroll and Entra ID for identity, and marking a candidate hired starts everything.
02. How is access decided for each new starter?
From the role. A position matrix maps each role to an access profile, so Entra ID provisions the account with the right permissions on day one instead of copying someone else's.
03. What happens when someone leaves?
Offboarding runs the same pipeline in reverse from one HR event: Entra ID access is revoked, data is handled and exit documentation is raised, with every step logged and timestamped for the audit.
04. Is this identity management or security work?
No. We don't run your identity platform, endpoints or helpdesk. We build the process that drives Entra ID, so the right things happen in the right order with a record of each one.
05. What did it save at Achieve Australia?
After six months in production, Achieve Australia's onboarding and offboarding pipeline had recovered 120 hours a month and $126K a year of operational cost, and onboarding one person had gone from four hours to 15 minutes.