Identity Lifecycle Automation 2D: Joiner-Mover-Leaver Simulator

Workforce Dynamics

Turnover rate 8 / 100 slots / day

Manual process lag 6 days

Simulation speed 2.0 days/s

Live Readouts

Active accounts0

Orphaned accounts0

Avg. deprovision time— d

How it works

Each of the 30 identity "slots" is drawn as a vertical lane: an HR directory record at the bottom, with mirrored accounts stacked above it in Active Directory, Cloud Apps and VPN. Joins and departures follow a discrete-time Poisson-like process — on every simulated day, each empty slot spawns a new hire with probability p_join, and each active employee resigns with probability p_leave, both set by the turnover slider.

p_join = p_leave = turnoverRate / 300  (per slot, per day)
Manual service:  P(system completes today) = 1 / lagDays
Automated SCIM:  completes same day across all 3 systems

This is the standard memoryless service-time model used in IAM operations analysis: a manual deprovisioning ticket queue completes with constant daily hazard 1/L, giving an expected completion time of L days (the lag slider) — but with high variance, so some accounts linger far longer. An orphaned account is any system account still marked active after its owner's HR record shows departure — exactly the access-hygiene gap that SOC 2 and ISO 27001 A.9.2.6 access reviews are designed to catch.

Turnover rate — how often people join or leave the simulated organization.
Manual process lag — mean ticket-completion time when provisioning/deprovisioning is done by hand, per system.
SCIM Automation — toggles automated System for Cross-domain Identity Management provisioning, which fans out create/disable calls to every connected system within the same day instead of queuing per-system tickets.
Amber nodes are mid-provisioning, green are healthy active accounts, red are orphaned accounts still live after the owner left — the metric every access review is trying to drive to zero.
Drag the diagram to pan, scroll/pinch to zoom — useful once turnover is high and lanes get busy.

drag to pan · scroll to zoom

Day 0

Provisioning Active account Orphaned (owner departed) Empty slot