HCM as identity source | Juvaro Help Centre

The four HCM switches on the Tenant Portal's Identity sources page, and directory sync.

Who can do thisTenant Admin

HCM can be the source of truth for who works in your company. You decide how far that goes with four switches on the Tenant Portal page Identity sources: "How people arrive in your workspace, and who keeps their profile accurate."

Identity sources

How people arrive in your workspace, and who keeps their profile accurate.

HCM

HCM manages employee identity

When on, employee names come from HCM and can't be edited here or in your identity provider. Turn off to let your IdP or admins manage names.

HCM removes access when an employee is terminated

Provision accounts on hire

When on, creating an HCM employee automatically creates or links their sign-in account and issues a temporary password.

Require every employee to have an account

When on, the HCM employee directory flags anyone without a sign-in account and prompts HR to create one. It never blocks adding an employee.

Flows

HCM is the source of truth for employee identity.

PictureThe four HCM switches. The first one gates the other three. The exact card layout can differ from this drawing.

The four switches

Switch	What it does	Starts
HCM manages employee identity	Employee names come from HCM and cannot be edited in the Tenant Portal or your identity provider. The other three switches depend on it.	On
HCM removes access when an employee is terminated	Setting an employee to Terminated removes their membership of the workspace.	On
Provision accounts on hire	Adding an employee creates or links their sign-in account and gives a temporary password.	Off
Require every employee to have an account	The Employees page flags anyone without an account and offers Provision accounts. It never blocks adding an employee.	Off

When HCM manages identity, the page says "HCM is the source of truth for employee identity." See Sign-in accounts and provisioning for what HR sees.

Termination and access

Removing access takes away the workspace membership only. The HCM seat is not released.
A terminated person who is also a Tenant Admin keeps their access, so the workspace is never locked out.

Directory sync

Juvaro's integration service reads employees from HCM to keep connected directories in step. In the Tenant Portal SSO settings you can push name, job title, department and manager changes from HCM to Microsoft Entra ID or Google Workspace. Name changes are currently not pushed to Google Workspace.