ADP Integration Overview

An ADP integration is typically established to serve as an authoritative source driving the employment lifecycle of a person. By providing trusted workforce data, the ADP integration acts as a system of record for ObserveID to create and manage identities and to enforce an attribute authority model.

The base configuration of the ADP integration supports identity data aggregation and analytics, with optional extensions available for full identity lifecycle management and attribute lifecycle governance.

Extending the base configuration enables support for Joiner–Mover–Leaver (JML) lifecycle events and allows provisioning and reconciliation of access based on lifecycle states and changes to authoritative attributes. In addition, the ADP integration supports lifecycle event idempotency, leverages immutable workforce identifiers, and enables identity automation and intelligence. It also establishes attribute authority by maintaining organizational context while ensuring data consistency and auditability.

Base configuration

The initial setup of the integration enables data aggregation and synchronization.

The base configuration includes the following steps:

  1. Required prerequisites must be configured in ADP for ObserveID.
  2. Connection parameters must be configured in ObserveID for ADP.
  3. The initial data load from ADP to ObserveID must be completed successfully.

Baseline capabilities

Once the base integration setup is complete, the following standard read-only capabilities are available:

  • Aggregation and synchronization of worker demographics data.
  • Authoritative identity data and analytics.

Optional configuration

Additional configuration enables read-write and governance capabilities, including:

  • Identity lifecycle management, supported with configuration of Joiner, Mover, Leaver rules to initiate identity creation, to reconcile access in alignment with identity state changes, and the deprovisioning process on identity termination.
  • Identity Attribute Model defining the "master" for each HR-related attribute.
  • Birthright Access configuration based on authoritative attributes.
  • Custom account attributes, enabled through optional attribute configuration.
  • Other custom integration operations, driven by specific business or security requirements.

The ADP integration enables centralized control over the full identity lifecycle, and real-time visibility into identity governance activities.