Problem
You are onboarding onto PlusPlus, and you want to integrate with your HRIS/identity-management solution so that you can load your employee data into our platform.
Integration Methods
Direct API Connections: Utilize APIs provided by HRIS systems (e.g., Workday, UKG Pro) for real-time data synchronization. This method allows for continuous data flow, ensuring that employee information is always up to date.
CSV Upload via SFTP: For systems without direct API support, periodically exporting employee data to a CSV file and uploading it through SFTP is a viable option. This method requires scheduling regular updates to maintain data accuracy.
SCIM Protocol: Leveraging SCIM (System for Cross-domain Identity Management) with platforms like Okta and OneLogin facilitates managing user identities across various cloud-based applications and services, promoting interoperability and streamlining data management.
* Note, the SCIM-based solution could also be combined with the other two.
Discussion
Comparison
All three integration options support provisioning, de-provisioning, and updating users, however, they do have some important differences:
| |||
Data Flow | We fetch from you | You push to us | You push to us |
Data Availability | Required, Optional, Custom | Required, Optional, Custom | Required-only |
Sync Frequency | Once a day | Once a day | On demand |
Employee Data
We expect to receive the following data for each employee record:
Field | Description |
Full Name | Full name of the employee. Required. |
Email Address | Primary email of the employee. Required. |
Picture URL | URL pointing to the employee’s profile picture. Optional. |
Employee ID | Employee identifier as it exists in your HRIS / People Management System. Optional. |
Hire Date | Date (YYYY-MM-DD) when the employee joined the company. Optional. |
Termination Date | Date (YYYY-MM-DD) when the employee left the company. This triggers de-provisioning. Optional. |
Department | The name of the department that the employee is associated with. Optional. |
Title | Employee's job title. Optional. |
Location | The logical name of employee's physical location. It must match one of the previously configured location names, or this property will be left blank. Optional. |
Manager’s Email | Primary email of the employee’s manager. Optional. |
<Custom attributes> | Custom attributes could include information such as Business Unit, Cost Center, Last Promo Date, etc. These are useful for reporting and as input for automated rules (see below). Optional. |
While only the Full Name and Email Address fields are required, providing the rest of the employee information has certain benefits:
People are more likely to engage on PlusPlus if they are able to see each others' photos, titles, departments, locations, managers, directs, and peers.
Organizers can get more meaningful insights on PlusPlus activities if they are able to filter/aggregate reports based on the employee data.
Managers are able to see and manage their directs' activities on the platform if we can establish the manager-direct relationships via Manager's Email.
You can write automated rules that make use the employee data to manage groups, enroll people into events, or assign them to tracks. For example, rules used to manage onboarding programs require the Hire Date. Our rules can also match on any custom fields your people integration provides to us (e.g. cost center, business unit, etc.).
De-provisioning Users
Users deprovisioned through the people integration will immediately lose access to the system, but these users will not be fully anonymized or removed from events and sessions straight away. A quarantine period can be configured via Settings > SSO & Security > Quarantine period before full deprovision. See How User Deprovisioning Works for more info.
Protecting Your Data
To enhance the protection of your employee data, we implement comprehensive security measures. Our protocols include end-to-end encryption for all data in transit, ensuring that every piece of information shared across our network, including internal transfers within our data centers, is fully secured. Additionally, we safeguard data at rest, encompassing not only the primary data storage but also our backup systems, by employing robust encryption standards. These practices are part of our commitment to maintaining the highest level of data privacy and security for our clients.
Technical Information
The integration data is fetched daily at 3 AM UTC.