What's inside
JML automation with HR as the conductor.
Connect any HR system — Workday, SAP SuccessFactors, BambooHR, AFAS, your own REST API — and RapidValue derives joiners, movers, leavers from the event stream. No CSV exports. No nightly batch jobs. No manual reconciliation.
Joiners, movers, leavers — at a glance
See period totals + per-day activity timeline. Each tile drills down to the underlying identities. KPIs include entitlements added on join, entitlements removed on leave, manual provisioning open items, and average completion duration.
Every person, every account, every entitlement
One identity view spanning HR, target systems, and the IGA-internal access model. Filter by department, status, identity type, source system. Click any row to open the full 6-tab drawer with profile, access tree, why-do-I-have-it explainability, timeline, and diagnostics.
Department changes don't slip through cracks
When HR reports a department or job-title change, the transfer engine recalculates SOL (should-be access) and queues a transfer. Operators see what's coming in (new access), what's going out (revoked), and what's already been applied automatically. Smart-cert is fired so the new manager confirms the existing access.
Managers see their team, not the whole company
Built-in scope filter: managers only see direct + transitive reports. From here they request access on a report's behalf, kick off ad-hoc reviews, or trigger leaver workflows. Role-based scoping is enforced server-side via every list endpoint — not a UI filter.
Every account, every system, owner-attributed
Accounts from HR, AD, Entra, Salesforce, ServiceNow, and any REST target — all in one inventory. Orphan accounts (no matching identity) are flagged for review. Last-used, account type, and provisioning status are visible on every row.
