• Solutions
    • IAM in the cloud
    • IAM Hybrid
  • To our products
    • my-IAM
    • IDM-Portal
    • DynamicGroup
    • DynamicSync
    • ADFAQ Blog
  • Company
    • About us
    • Our customers
    • Our partners
    • Career
    • News
  • Contact
FirstAttributeFirstAttribute
FirstAttributeFirstAttribute
  • Identity Management
    • IAM in the cloud
    • IAM Hybrid
  • Products
    • my-IAM
    • IDM-Portal
    • DynamicGroup
    • DynamicSync
  • Company
    • About us
    • Our customers
    • Our partners
    • Career
    • News
    • Tech Blog
  • Contact
  • English
    • German

Employee data from HR to AD – Retail project

Projects |

 

Employee data is usually managed by the human resources (HR) department. However, every employee with a computer workstation also needs an AD account. Maintaining multiple employee databases manually quickly leads to chaos. Synchronization in the direction of AD can be part of the solution here.

Index

  • Effectively manage HR database and AD
    • Save time, automate manual data maintenance from HR to AD
    • IDM-Automation for reliable data synchronization
  • Fast user creation directly in AD for special cases
    • Non-IT employees edit user accounts
  • Overall project summary

Effectively manage HR database and AD

A German family business in the retail sector from the western Ruhr area was faced with exactly this problem. As is often the case in practice, the customer had a SAP HCM database in use which contained employee data. It was particularly time-consuming that:

  • this staff database had to be maintained manually and
  • synchronized with Active Directory manually.

With a size of 1,000 employees at the project site, this parallel maintenance of two systems was a time-consuming process. Not only did it usually keep several IT administrators busy, but it was also a source of errors. Data was often entered either late, incomplete or incorrectly. It also meant that users had to put up with waiting times. In practice, users did not have all the access rights to applications before data was transferred from the HR system to AD.

Save time, automate manual data maintenance from HR to AD

The customer approached FirstAttribute with the request to automate this time-consuming manual process of synchronization. In detail, selected entries in the HR database were to be transferred to the AD database automatically and time-controlled via an SAP interface. The goal was to relieve the IT administrators of time-consuming routine tasks and to stabilize the data quality between the systems.

IDM-Automation for reliable data synchronization

FirstAttribute’s IDM-Automation Software was identified as a quick workaround. The automated service runs hidden in the background and updates the data in Active Directory. This works by using information that is regularly exported from the SAP system and made available to the interface.

Synchronize data from HR to AD with IDM-Automation

Using several scripts developed by FirstAttribute

  • the data is mapped, missing values are generated and saved in AD
  • home directories are created
  • group memberships are set
  • and an extensive error logging is provided.

This is a one-way synchronization, as no data is written back from AD to the SAP HCM system. Within a few months, the processes were converted and automated in close cooperation with the customer.

Fast user creation directly in AD for special cases

At the same time, there was another requirement from the customer. External and technical employees were not maintained in the customer’s HR database. These users had to be entered directly in Active Directory. It was requested that this task could also be delegated to non-IT employees.

Non-IT employees edit user accounts

To accomplish this, FirstAttribute’s FirstWare IDM portal was chosen as a user-friendly solution. The portal enables identity tasks to be performed independently, self-explanatory and in a short time.

In-depth IT knowledge and direct access to the end systems are not necessary. The customer was impressed by the portal’s intuitive web interface, where all the information can be conveniently entered on a single page.

Depending on the user type, external or technical, individual interfaces with different, company-specific fields were designed. In Exchange, mailboxes should be created when a new user is created.

Overall project summary

Thanks to customer-oriented project management, the customer’s requirements were implemented within a few months. This included regular consultations and test runs to ensure perfect mapping of the customer’s performance specifications. In addition, the customer received configuration documentation that precisely recorded all parameters and included assistance.

Both projects were successfully completed. The software applications have been in effective and productive use for several months.

Contact us

Artikel erstellt am: 30.04.2019
Share

You also might be interested in

20 years FirstAttribute – A review

Apr 19, 2021

FirstAttribute was formed in 2001 by the company’s founder Andreas[...]

DynamicGroup 2020.1 – Group Managed Service Accounts available

May 28, 2021

FirstAttribute has released a new version of DynamicGroup. DynamicGroup 2020.1[...]

Microsoft Teams properly planned and implemented (Interview)

Apr 12, 2021

Microsoft Teams is now widely used. Many companies have had[...]

Last articles

  • FirstAttribute joins the Rewe Team Challenge Dresden 2025
  • FirstAttribute Honored with Familienpakt Bayern Membership
  • PeopleConnect 2.3: Globally connected – your contacts now displayed on the map
  • Entra and AD Group Management with IDM-Portal 5.1
  • Meet NIS2 requirements with the right IAM system

Our IAM Solution

Ihre IAM-Lösung: FirstWare IDM-Portal

my-IAM for Cloud Identity Management in Microsoft Teams

Contact Info

  • FirstAttribute AG
  • Am Büchele 18, 86928 Hofstetten, Germany
  • +49 81 969 984 330
  • info@firstattribute.com
  • firstattribute.com

Solutions

  • IAM in the cloud
  • IAM Hybrid

Company

  • Career
  • Contact

Latest News

  • FirstAttribute joins the Rewe Team Challenge Dresden 2025
  • FirstAttribute Honored with Familienpakt Bayern Membership
  • PeopleConnect 2.3: Globally connected – your contacts now displayed on the map
  • Entra and AD Group Management with IDM-Portal 5.1
  • Meet NIS2 requirements with the right IAM system

© 2025 · FirstAttribute AG.

  • Legal Information
  • Privacy Policy
Prev Next