Identity Lifecycle Automation 2D: Understanding Account Provisioning and Deprovisioning

What Identity Lifecycle Automation Is

Identity Lifecycle Automation (ILM) is a process that manages employee identities across various systems and applications throughout their employment lifecycle. This includes provisioning accounts when an employee joins, managing access during their tenure, and deprovisioning accounts upon departure to maintain security and compliance.

The 2D simulation illustrates these processes through a flat diagram where each lane represents different systems such as Active Directory, Cloud Apps, and the VPN.

Why It Matters

Proper identity lifecycle management is crucial for maintaining security and compliance. Manual deprovisioning can lead to orphaned accounts that pose a risk of unauthorized access or data leakage. Automated processes, like those demonstrated in the SCIM (System for Cross-domain Identity Management) section of the simulation, ensure timely and accurate account changes.

By automating these tasks, organizations can reduce administrative overhead, minimize human error, and maintain consistent security policies.

How It Works

The 2D lane diagram simulates the flow of employee accounts through different systems. When a new employee joins (Joiner), their account is provisioned in Active Directory, Cloud Apps, and the VPN. During their tenure as a Mover, their access may be adjusted based on role changes or department transfers. Upon departure (Leaver), manual deprovisioning can leave behind orphaned accounts if not properly managed, while automated SCIM processes ensure that all systems are updated in real-time.

The simulation allows users to adjust workforce turnover rates and process lags to observe how these factors impact the efficiency and security of identity management.

Real-World Examples

In large enterprises, mismanaged identity lifecycle automation can lead to significant security risks. For instance, a departing employee might still have access to sensitive data if their accounts are not promptly deprovisioned. This can result in data breaches or insider threats.

On the other hand, automated ILM processes can help organizations like healthcare providers and financial institutions comply with stringent regulatory requirements such as HIPAA and GDPR.

Frequently asked questions

Try it live

Everything above runs in your browser — open Identity Lifecycle Automation 2D: Joiner-Mover-Leaver Simulator and change the parameters while it is running. Nothing is installed, nothing is uploaded, the whole model lives in one tab.