1 min lesson
Lifecycle automation (Joiner/Mover/Leaver)
Name the parts in "Lifecycle automation (Joiner/Mover/Leaver)" and give the practical job of each one.
Step 1 of 2
"Design an automated JML pipeline" is the canonical systems-design prompt for this role. The strong answer starts from one principle: the HRIS is the source of truth and identity flows downhill from it without a human in the loop.
JML - Joiner, Mover, Leaver - is the identity lifecycle. The HRIS (Workday, Rippling, BambooHR) records the human-resources fact; everything else reacts. Identity events flow HRIS → IdP → SaaS apps over SCIMSystem for Cross-domain Identity Management. A standard for automatically creating and removing user accounts when people join or leave. Press Enter for the full definition. and API, so onboarding and offboarding are instant, consistent and audited.
- Source of truth
- HRIS - start date, role, department, manager, termination
- Orchestrator
- IdP (Okta/Entra) or a workflow engine that watches HRIS events
- Access model
- Group-based - role/department maps to groups, groups map to app access
- Targets
- SaaS apps via SCIMSystem for Cross-domain Identity Management. A standard for automatically creating and removing user accounts when people join or leave. Press Enter for the full definition., plus MDM for device provisioning/wipe