Build a Secure Onboarding Experience

Last updated: September 21, 2026Applies to current supported NIM releases

NIM Onboarding

Give new users a secure first-day experience: verify who they are, let them set their own password, and activate their prepared account without sending a credential.

NIM onboarding uses an account prepared in advance, trusted HR or SIS data, and a user-controlled verification journey. The person confirms their identity with a question-and-answer challenge or one-time passcode (OTP), creates a password, and NIM runs the actions needed to activate access.

Before you begin

Prepared accountA target system with the account to activate, such as Active Directory.

Trusted person dataHR or SIS data with a unique ID and a personal email address and/or mobile number.

Message deliveryWorking email and, if using OTP, SMS.

Secure endpointHTTPS with a valid certificate for every user-facing onboarding link.

Data you need

Each eligible person needs a stable unique identifier—such as an employee or student ID—plus a contact method that works outside the organization. Their onboarding record must relate to the target-system account that NIM will activate.

Build the onboarding journey

Complete the five stages in order. Each stage produces the configuration used by the next one.

1. Prepare eligible user data

Enable and configure the Internal onboarding table, relate it to the target account, create the filters, and load people who are ready to start onboarding.

OutcomeEvery eligible person has a secure onboarding ID, an expiry date, verified contact details, and a relationship to the account NIM will activate.

Open step 1

2. Design the verification experience

Create an onboarding profile, choose OTP or question-and-answer verification, and configure the screens users complete.

OutcomeA named onboarding profile provides a clear, branded flow for verifying identity and collecting the new password.

Open step 2

3. Activate the account safely

Create the action variables and actions that use the verified record to reset the password, enable the target account, and record the completed event.

OutcomeNIM changes the correct account only after the user passes the configured verification step.

Open step 3

4. Deliver the onboarding invitation

Create the welcome notification and, for OTP flows, the email and/or SMS message that delivers the verification code.

OutcomeUsers receive a secure link to begin onboarding and, when applicable, the one-time passcode through the selected channel.

Open step 4

5. Test the complete journey

Use a safe test record to verify the lookup, identity check, password change, account activation, messages, and final target-system sign-in.

OutcomeA tested, end-to-end onboarding journey ready to make available to your organization.

Open step 5

Step 1 of 5

Extend the experience

→

Use one-time passcodes
Configure OTP delivery and verification for a secure, time-limited identity check.

→

Gather additional user input
Add fields to collect information from the user during their onboarding journey.

→

Explore NIM Onboarding
Return to the onboarding overview for related concepts and documentation.

Report a problem with this page

Found an error or a missing step? Open the feedback form and describe what needs changing. The article details and Documentation topic are filled in for you.

Need help with your NIM environment? Contact Support.