NIM

Click Internal System, check the "Onboarding" table

Open onboarding table, click Columns

Check Key for the ID column

Next, a relationship need to be created between the Onboarding Table and the target system table. In this case AD > Users. See Inter-system relations for more on this

Create a new filter and name it according (e.g. Onboarding_Employee_Create). Add additional attributes as needed to refine your results

Create 2 script columns within this filter: onboardExpires and secureID. You can name them whatever makes sense to you, but for consistency’s sake, we will label them as such

1. onboardExpires - Generates a timestamp in milliseconds for the onboarding profile to use as an expiration date. Adjust the number of days you want the profile to be accessible by changing the “7” to the number of days needed.

   

2. secureID - Generates the unique secure ID that will be used for each users onboarding profile

   

Create a new filter and name it accordingly (e.g. OnboardingQuestionAnswer). This will be used to generate the variables for the answers to your security questions and the mapping in your Onboarding Profile. This will be a parameter-based filter for the ExternalID in the onboarding table.

Create a new mapping

Use the Create filter and add these attributes, but you will have to come back to this mapping after you create the Profile in the Onboarding Profiles section.

Create a new Job

Under Configuration tab, add a new CRUD task and select the mapping you just created

Under Execution, Evaluate and Run

You should now have Onboarding records provisioned

Go to Configuration > Onboarding

Create an onboarding profile by clicking Add

These are the profile settings that would be used for the enableAccount profile in this example. Each profile needs to have a form function for each form within the app.

1. Under Onboarding app, select Onboarding

2. Under Question-answer filter, select your filter with the Questions and Answers

3. Select message for the remaining two drop downs on the right

Each form on the configuration page needs to be updated to fit the answers you choose as an Onboard Variable. In this example, there are 4 security questions that will be included in the onboarding process, along with the welcome, registration, password, and summary forms. Depending on the level of security you desire, you can update the number of question/answer forms, but the other 4 forms are required

1. Under the Form Variable column, select the drop down option vAnswer.

2. Create a variable name for that vAnswer in Onboard Variable column

3. In the Answer Column, choose the attribute from your QuestionAnswer filter that you would like to use as your answer to the question you just set. In this example, we are using first name so we would set the Answer Column attribute to match

In Form Contents in the bottom section of the configuration page of the form you’re creating or editing, you will need to update the input.label, input.placeholder, and info fields. Label and placeholder are title fields, you can match those to the question. The info field is a description field for the question, giving instructions on any specifics of how to answer the question properly, such as date formats as shown here.

The action variables page will show the output of the QuestionAnswer filter. To give the proper naming conventions, you can select the play button on the right of the variable name to autofill. If you choose to autofill instead of putting in your own variable name, make sure it matches what you set as the Onboard Variable name in the previous configuration page. For consistencies sake, choose easy to understand names and include the prefixes included by default with the autofill feature.

Onboarding actions are similar to mappings for filters in their function

1. Add a new action by selecting the Add at the top right

2. Select the system, likely Active Directory.

3. Select the UserUpdate function

4. Map what variables you’ve created in the configuration and action variables pages to their corresponding AD attribute. In this case, you will need the objectGUID, accountPassword, and Enabled set to true to allow the user to claim their account

5. Select Generate Notification Event if you want to receive a notification the account was claimed

In the settings page, all of the time values are shown in minutes and can be updated to meet your needs.

The Validation page is similar to the NIM validation. If there are any errors, this will tell you where and what they are to begin troubleshooting. Once you’ve completed these steps, return to the Mappings section and add the Onboarding Profile you just created to the Profile attribute in the Create mapping

For a user to receive the email invitation with their secure link, you need to create the Event Template. You will also create a template for the onboarding summary with the details of their new account, which may include the password and login name they’ve just created or other details you might want to send after the account is successfully claimed

1. Create the template

2. Create an event for the mapping you created earlier