Features
The Activate Identity Manager provides a comprehensive suite of Tasks and Workflows for managing user accounts throughout their lifecycle. Each task includes configurable approval steps from designated business or IT roles, ensuring actions align with your organisation’s governance and business rules.
Identity Management Tasks
Onboard User (Create User)
Provisions a new Active Directory (AD) or other directory user account for:
- Employees
- Contractors
- Vendors
Accounts are created according to defined business rules, which can include:
- Home folder creation
- Mailbox provisioning
- Default entitlements based on Department and Location
The New User form is fully customisable, allowing any AD attributes to be captured. Location-specific fields such as office address are auto-filled, and the user’s Manager is automatically assigned in AD for use in future approval workflows.
Offboard User (Delete User)
Deprovisions a user account in accordance with business rules, including:
- Archiving home folders and email
- Removing access from systems (automatically or by notifying relevant teams)
- Supporting stand-down periods before disabling or deleting accounts
If the departing user was an approver, Activate automatically prompts their Manager to assign a replacement, ensuring no approval workflows are left orphaned.
Update Details
Allows users to update selected Active Directory attributes, such as:
- Mobile Number
- Extension
Editable fields are defined per organisation, and some updates may require approval from the user’s Manager or other designated approvers.
Move User
Moves a user between Departments or Locations. Upon approval, Activate:
- Moves infrastructure components such as Home Folders and Mailboxes
- Updates Distribution Lists and other entitlements based on the new location or department
Rename User
Used when a user’s Account Name or Display Name changes, such as after a name change. Optionally, related infrastructure — including home folders — can also be renamed automatically.
Disable User / Enable User
Provides a quick and secure way to disable or re-enable AD accounts directly through Activate.
- Eliminates the need for Service Desk teams to access Active Directory Users & Computers
- Allows fast user lookup and management via Activate Search
Delegate Approvals
Enables approvers to temporarily delegate their approval authority to another user for a defined period. The delegate can approve any pending or future jobs on behalf of the original approver during the delegation window.
Update Owner
Transfers ownership of linked accounts (such as administrative or shared accounts). When an owner departs, Activate can:
- Prompt for a new owner
- Automatically terminate the linked account if configured to do so
Set Out of Office
Allows users to configure their Exchange Out of Office status for a specific period. This task can also be automatically triggered during user de-provisioning.
Add Role / Remove Role
Permits authorised roles to:
- Add users to Activate-defined Roles such as Departments or Locations
- Remove users from those roles when necessary
Lifecycle Workflows
The following automated workflows run on a scheduled basis, typically overnight, to maintain account hygiene and compliance.
Expired Account
Identifies AD accounts with a set expiry date, commonly used for Contractors or Vendors. Managers are prompted to:
- Extend the expiry date
- Disable the account
- Terminate the account (which triggers the Terminate User process)
Managers can also defer their decision, with automated reminders after the deferral period.
Inactive User
Detects inactive AD accounts that:
- Have not logged in for a specified number of days, or
- Have never been logged in within a defined timeframe
Managers can then choose to:
- Disable the account
- Terminate the account (using the Terminate User workflow)
- Postpone the decision
Verify Info
Prompts users to confirm or update their personal information using the Update Details task. This workflow can be configured to:
- Trigger every X months
- Send initial prompts to new users to complete their profiles
- Issue follow-up reminders to ensure data accuracy over time
Escalations
All tasks include built-in escalation mechanisms to prevent workflow delays. Activate automatically escalates approvals if a user or manager has not completed a task within a defined timeframe. This ensures timely completion and reduces manual follow-up by Service Desk teams.