Automate onboarding & offboarding from AFAS to Entra
Let IT automatically adapt to HR processes. New employees receive immediate access to the right systems, job changes are processed automatically, and upon termination, access is immediately revoked. This facilitates faster, more consistent onboarding and offboarding without manual steps.
Automate identity management with AFAS
In many organisations, errors, delays, and security risks arise because HR systems and IT environments operate separately. With Joinly's HR ↔ Microsoft Entra ID integration, you can use your HR system as the central source for identity management. This way, accounts, roles, and access are automatically synchronised based on HR data, without manual actions.
AFAS as your central place for HR data
ISO27001 certified
Automatic onboarding, offboarding and changes
New employees are automatically created in Entra as soon as they appear in AFAS. No tickets, no waiting times, and immediately productive from day one.
Better security & compliance
Less management, more control
Save on software costs
Schedule a demo for the integration with AFAS
More about AFAS
Integrating AFAS with Joinly: Automatic user management
AFAS Profit is the central source for HRM, payroll, and personnel management for many organizations. But as long as AFAS is not connected to the rest of your applications, user management remains a manual and error-prone process.
The challenge: manual user management
AFAS contains up-to-date, reliable personnel data, but without a direct integration with your IT landscape, problems arise:
IT manages accounts manually via Excel, email, or separate lists
Employees unnecessarily wait for access to systems upon hiring
Accounts of departed employees remain active for too long
HR and IT work separately, resulting in inconsistencies
All of this leads to increased risks of data breaches, loss of productivity, and unnecessary workload for IT management.
The solution: integrating AFAS via Joinly
Joinly offers a robust, proven integration between AFAS and all your business software. We automate the entire process of user provisioning and deprovisioning, based on the data in your AFAS HR administration.
What this integration delivers:
New employees automatically receive accounts in the applications they need
Changes in position, department, or contract are immediately reflected in all your applications
Accounts are automatically deactivated upon termination
HR takes the lead; IT no longer has to perform manual actions
With the AFAS integration, a streamlined chain from HR to IT is created. This improves security, increases efficiency, and shortens the time-to-productivity during onboarding.
Certified AFAS integration partner
Joinly (KoppelHet) is certified by AFAS as an integration partner. This ensures that you have an integration that has been checked and certified by AFAS itself. For example, check our integration with Entra ID / Active Directory on AFAS's page: https://partner.afas.nl/product-prs/artikel?BiId=17349
How do I set up role-based access control (RBAC) and least privilege for a municipality?
Start with the roles in your HR system and map them to roles, not to individual permissions per person. Group each role with precisely the access required for the job, adhering to the principle of least privilege. Manage these roles centrally and let an orchestration layer automatically assign and revoke them. This keeps access predictable, limited and demonstrable.
Wat betekent de Cyberbeveiligingswet (NIS2) voor het toegangsbeheer van gemeenten, provincies en waterschappen?
Gemeenten, provincies en waterschappen worden onder de Cyberbeveiligingswet automatisch aangewezen als essentiële entiteit, ongeacht hun omvang, en vallen daarmee onder proactief toezicht. Toegangsbeheer is een vast onderdeel van de zorgplicht: toegang moet beperkt, rolgebaseerd en aantoonbaar zijn. Geautomatiseerd accountbeheer met logging is de praktische manier om daaraan te voldoen.
How do I automatically revoke all access for an employee upon offboarding?
Link the HR system to an orchestration layer above Microsoft Entra ID or Google Workspace. As soon as the end-of-employment date is registered in the HR system, this layer automatically revokes or suspends the account and all linked permissions at that exact moment. This prevents active accounts of departed employees and records every change in a log.
Wat vraagt de Baseline Informatiebeveiliging Overheid op het gebied van toegangsbeheer voor medewerkers?
De Baseline Informatiebeveiliging Overheid vraagt dat toegang voor medewerkers gecontroleerd wordt verleend, beperkt blijft tot wat nodig is voor de functie, periodiek wordt beoordeeld en bij vertrek direct wordt ingetrokken. Kort gezegd: rolgebaseerde toegang, least privilege, logging en een sluitende levenscyclus van accounts. Door het personeelssysteem te koppelen aan de werkomgeving automatiseer je precies die eisen.
Identity & Access Management als fundament voor groei en controle bij Dael
Samen met Joinly heeft DAEL het instroom, doorstroom en uitstroom-proces geautomatiseerd. Door AFAS als betrouwbare bron te koppelen aan Active Directory en Entra ID, worden gebruikersaccounts nu automatisch aangemaakt, aangepast of gedeactiveerd op basis van HR-mutaties.
