My1Login User Provisioning is a lifecycle identity management module that automates the provisioning and de-provisioning of user access to applications across an organisation. Key capabilities include: - **Full Account Lifecycle Management:** Manages user access from onboarding through offboarding, ensuring appropriate application access is granted and revoked at the right times. - **Policy-based Enrolment:** Automates user provisioning to target applications based on directory permissions, reducing manual effort during onboarding. - **Organisational Provisioning:** Sets permissions at group and user level, synchronised with directory services such as Active Directory. When a user is added to a group in the directory, provisioning rules automatically assign appropriate application access for that role. - **Just-in-Time (JiT) Provisioning:** Provisions a user's access to an application at the moment they first attempt to access it, once authorised by an admin within My1Login. - **Automated De-Provisioning:** When an employee's directory service access is terminated, all associated application access is automatically removed, eliminating residual access risks from ex-employees. - **Application Provisioning Rules:** Uses a flexible rule set to control which users get access to which applications and with what level of permissions. The product integrates with identity standards such as SAML and synchronises with directory services like Active Directory to reduce administrative overhead and maintain consistent access control.