46 building blocks

SendMail

Sends configured email notifications using eDir technical objects, standardizing messaging setup and making changes easier for administrators.

IDV

Provisions and manages internal eDirectory/IDM rights as accounts and groups, improving least-privilege control and auditability of admin access.

ADAC

Provisions additional AD accounts for the same IDM user when required, supporting separate test, service, or admin accounts with clear accountability.

SPIRIT

Compares application data with IAM data during reconciliation and imports anomalies via CSV, enabling data-driven cleanup and governance evidence.

SPIDER

Integrates an application into IAM using a generic approach during onboarding, accelerating integration speed and reducing connector backlog.

EntitlementValues

Defines all possible values of an entitlement in a table, standardizing inputs and enabling validation, picklists, and cleaner governance reporting.

RoleMonitor

Tracks and notifies when roles are granted or revoked, creating immediate visibility and an evidence trail for ops and audit.

AttributeHistory

Records historical values when designated attributes change, enabling audits, troubleshooting, and delta-based governance decisions over time.

SendMail

Sends configured email notifications using eDir technical objects, standardizing messaging setup and making changes easier for administrators.

ADAC

Provisions additional AD accounts for the same IDM user when required, supporting separate test, service, or admin accounts with clear accountability.

EventThreshold

Limits processing when a flood of transactions is detected, protecting IDM and connected applications from overload and reducing outage risk.

PEA

Enforces and protects attribute values across eDir and remote systems when changes flow end-to-end, preventing unauthorized drift and improving compliance.

EmptyPersonalRole

Revokes or empties a user's Personal Role when key org attributes change, preventing access drift and improving mover safety.

RoleMonitor

Tracks and notifies when roles are granted or revoked, creating immediate visibility and an evidence trail for ops and audit.

UserStatusActions

Executes predefined actions when a user reaches a specific lifecycle status, centralizing automation and improving joiner-mover-leaver hygiene.

AttributeHistory

Records historical values when designated attributes change, enabling audits, troubleshooting, and delta-based governance decisions over time.

AutoGroup

Updates group membership automatically when authoritative attributes like department or role change, keeping access groups aligned without manual effort.

Normalization

Normalizes data between LDAP objects when values are created or updated, improving consistency and reducing downstream mapping and edge cases.

RolesWithGracePeriod

Keeps a copy of revoked roles for a configured grace period after revocation, reducing disruption risk and enabling smoother transitions.

ReciprocalAttributes

Maintains reciprocal attributes when an interface cannot, preserving consistent relationships like manager-subordinate or group-member and reducing mismatches.

AssignRole

Assigns or revokes roles when external workflows write instructions into IAM-EventTriggers, executing deterministic role changes without direct RBPM APIs.

SendMail

Sends configured email notifications using eDir technical objects, standardizing messaging setup and making changes easier for administrators.

SyncGroups

Replicates eDir groups to AD when group data changes, including dynamic and nested patterns, propagating consistent access models across directories.

RoleMonitor

Tracks and notifies when roles are granted or revoked, creating immediate visibility and an evidence trail for ops and audit.

UserStatusActions

Executes predefined actions when a user reaches a specific lifecycle status, centralizing automation and improving joiner-mover-leaver hygiene.

ReassignManager

Reassigns a user's manager when the current manager leaves or is disabled, preserving approval chains and preventing orphaned relationships.

SendMail

Sends configured email notifications using eDir technical objects, standardizing messaging setup and making changes easier for administrators.

ADLA

Sets a user as local admin on domain-joined computers when the corresponding IDM role is granted, enforcing controlled endpoint admin rights.

ADEMA

Alerts security teams in real time when high-risk AD modifications occur, improving monitoring, audit evidence, and incident triage.

PEA

Enforces and protects attribute values across eDir and remote systems when changes flow end-to-end, preventing unauthorized drift and improving compliance.