Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update what-is-provisioning.md 12-06-2024 #1266

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 6 additions & 4 deletions docs/identity/hybrid/what-is-provisioning.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,9 +14,11 @@ ms.author: billmath

# What is identity provisioning?

Today, businesses, and corporations are becoming more of a mixture of on-premises and cloud applications. Users require access to applications both on-premises and in the cloud. There's need to have a single identity across these various applications (on-premises and cloud).
Today, businesses and corporations are using a mixture of on-premises and cloud applications, with users requiring access to applications in both spaces. An increasing need to have a single identity across these various applications (on-premises and cloud) stirs the "Provisioning" topic.

Provisioning is the process of creating an object based on certain conditions, keeping the object up to date, and deleting the object when conditions are no longer met. For example, when a new user joins your organization, that user is entered in to the HR system. At that point, provisioning can create a corresponding user account in the cloud, in Active Directory, and different applications that the user needs access to. This allows the user to start work and have access to the applications and systems they need on day one.
Provisioning is the process of creating an object based on certain conditions, keeping the object up to date, and deleting the object when conditions are no longer met. For context, an "object" can be a user, device, or service in on-premises and cloud environments.

For example, when a new user joins an organization, that user's profile is entered into the HR system. At that point, Provisioning can create a corresponding user account in the cloud, in Active Directory, and different applications that the user needs access to. This allows the user to start work and have access to the applications and systems they need on day one. (Note: The HR department or Organizational Unit must be setup to have access to these applications and systems for the new user to inherit these permissions)

![Diagram that shows cloud provisioning with Microsoft Entra ID.](media/what-is-provisioning/cloud-1.png)

Expand All @@ -30,9 +32,9 @@ With regard to Microsoft Entra ID, provisioning can be broken down in to the fol

![Diagram that shows HR-driven provisioning with Cloud HR, On-premises HR, and Microsoft Entra ID.](media/what-is-provisioning/cloud-2.png)

Provisioning from HR to the cloud involves the creation of objects (users, roles, groups, and so on) based on the information that is in your HR system.
Provisioning from HR to the cloud involves the creation of objects (users, roles, groups, and so on) based on the information that is in the organization's HR system.

The most common scenario would be, when a new employee joins your company, they're entered into the HR system. Once that occurs, they're provisioned to the cloud. In this case, Microsoft Entra ID. Provisioning from HR can cover the following scenarios.
A common scenario would be, when a new employee joins a company, they're entered into the HR system. Afterwards, they're provisioned to the cloud. In this case, Microsoft Entra ID (Note: formerly known as Azure Active Directory (AAD)). Provisioning from HR can cover the following scenarios.

- **Hiring new employees** - When a new employee is added to cloud HR, a user account is automatically created in Active Directory, Microsoft Entra ID, and optionally Microsoft 365 and other SaaS applications supported by Microsoft Entra ID, with write-back of the email address to Cloud HR.
- **Employee attribute and profile updates** - When an employee record is updated in cloud HR (such as their name, title, or manager), their user account will be automatically updated in Active Directory, Microsoft Entra ID, and optionally Microsoft 365 and other SaaS applications supported by Microsoft Entra ID.
Expand Down