1 min lesson
Lifecycle automation: Joiner, Mover, Leaver
Rebuild the parts of "Lifecycle automation: Joiner, Mover, Leaver", then say why each one matters.
Step 1 of 2
"Design an automated JML pipeline" is the canonical systems-design prompt for this role. The strong answer starts from one principle: the HRIS is the source of truth and identity flows downhill from it without a human in the loop.
JML stands for Joiner, Mover, Leaver, the three stages of the identity lifecycle. The HRIS, such as Workday, Rippling or BambooHR, records the human-resources fact and everything else reacts, so onboarding and offboarding are instant, consistent and audited.
The pipeline shape
- Source of truth
- HRIS: start date, role, department, manager, termination
- Orchestrator
- IdP such as Okta or Entra, or a workflow engine that watches HRIS events
- Access model
- Group-based. Role and department map to groups, and groups map to app access
- Targets
- SaaS apps via SCIMSystem for Cross-domain Identity Management. A standard for automatically creating and removing user accounts when people join or leave. Press Enter for the full definition., plus MDM for device provisioning/wipe