Provisioning tutorial

Last updated: October 1, 2026Applies to current supported NIM releases

Provisioning tutorial

Build a complete provisioning workflow: load HR data, connect Active Directory, identify accounts to create, generate credentials, and schedule the process.

Before you begin

NIM accessSign in with permission to configure systems, processing, output, and scheduling.

Test dataDownload the HR500 dataset (ZIP) and extract it on the NIM server.

Active DirectoryUse a test AD environment or an approved organizational unit for the created accounts.

Use a safe test scope

This tutorial creates and updates Active Directory accounts. Complete it in a test environment or use a dedicated organizational unit and test records.

Build the workflow

Complete the ten stages in order. Each stage builds on the configuration created in the previous one.

1. Add the CSV source system

Add the HR500 CSV files as a NIM source system, collect the data, and set stable primary keys for its tables.

OutcomeNIM can read the HR500 employee data and uniquely identify each source record.

Open step 1

2. Add the Active Directory target

Configure an Active Directory system that NIM can use to create and update accounts.

OutcomeNIM can collect the target accounts and has a controlled destination for provisioning changes.

Open step 2

3. Create the system relation

Relate the HR500 source records to Active Directory accounts so NIM can identify which records already match.

OutcomeA reusable relation compares each employee with the corresponding AD account.

Open step 3

4. Find employees without accounts

Create a filter that selects source employees who do not yet have a matching Active Directory account.

OutcomeA controlled population for account creation, rather than every source record.

Open step 4

5. Generate account names

Create a name generator for values such as sAMAccountName, userPrincipalName, and common name.

OutcomeEach new account receives consistent, unique identifiers.

Open step 5

6. Generate initial passwords

Create a password generator that produces an initial password for each new AD account.

OutcomeNew accounts receive passwords that follow your configured complexity rules.

Open step 6

7. Create the account mapping

Map the selected HR500 attributes, generated names, and password into an Active Directory user-create operation.

OutcomeA mapping that provisions a new AD account for each selected employee.

Open step 7

8. Combine the work in a job

Add the mapping to a NIM job so the provisioning action can run as one managed unit.

OutcomeA reusable job that runs the account-creation mapping.

Open step 8

9. Schedule the provisioning job

Create a scheduler task to run the job automatically and review the result.

OutcomeProvisioning runs on a controlled schedule instead of relying on manual execution.

Open step 9

10. Update existing accounts

Add a second mapping to keep existing Active Directory accounts synchronized with HR500 data.

OutcomeThe workflow can create new accounts and update existing accounts when source data changes.

Open step 10

Step 1 of 10