Integration with HR2Day
Automate employee onboarding, progression, and offboarding to your IT landscape
Let IT automatically adapt to HR processes. New employees receive immediate access to the right systems, job changes are processed automatically, and upon termination, access is immediately revoked. This facilitates faster, more consistent onboarding and offboarding without manual steps.
- HR2Day as your central place for HR data
- ISO27001 certified

Why would you integrate your IT environment with HR2Day?
In many organisations, errors, delays, and security risks occur because HR systems and IT environments operate independently. With Joinly's HR ↔ integration, you use your HR system as the central source for identity management. This ensures accounts, roles, and access are automatically synchronised based on HR data. Without manual actions.
Automatic onboarding, offboarding and changes
New employees are automatically created in your IT environment (Microsoft, ERP, CRM, Financial system) as soon as they appear in your HR system. No tickets, no waiting times and instantly productive from day one.
Better security & compliance
Access is automatically adjusted with role changes and immediately revoked upon termination of employment. This helps prevent zombie accounts and makes it easier to comply with security and audit requirements.
Less management, more control
IT no longer needs to manage manual accounts. Everything is handled centrally, predictably, and transparently via Joinly with logging, monitoring, and error handling.
Save on software costs
Nothing is more annoying than paying for something you do not use; Joinly automatically deactivates accounts that are not being used in your Microsoft environment, CRM, ERP, or other software package.
"We were able to move extremely quickly, and the flexibility of setting up the integration is a huge plus for us"
What happens the moment HR changes something
Four moments in an employment, the same pattern every time: HR2Day leads and Joinly carries out the consequences.
Your business software - Target systems
Employee is created
As soon as a new employee is created in HR2Day, Joinly automatically creates it in all your business applications. This ensures the account is automatically provisioned and created for the new employee.
Employee data is being modified
Joinly retrieves the updated data from your HR system and synchronises all changes to your integrated business software.
Employee changes role and/or department
A position change in HR2Day can affect the applications and/or permissions the employee has access to. The job change is automatically retrieved by Joinly and synchronised to your business software.
Employee exits service
When an employee leaves the company, they are automatically deactivated by Joinly so that rights from applications are revoked and accounts are deactivated.
Frequently asked questions
Questions about this integration
The questions IT managers considering this integration ask us most. If yours is not here, put it to us during the demo.
What exactly does the integration between HR2Day and Joinly do?
Joinly reads your employees from HR2Day and uses that as the source of truth for access management. A new hire, a role change or a departure in HR2Day is translated automatically into accounts and permissions in Microsoft Entra ID, your on-premises Active Directory and your connected applications. You maintain the data once, where it belongs.
How does Joinly retrieve data from HR2Day, and how often?
Over an API, not by exchanging files: Joinly collects the employees from an endpoint on your HR2Day environment, using its own authentication key. No CSV involved. How often that happens is up to you — hourly, daily or weekly, at a time you set. Most organisations run the import overnight, so a new joiner has an account waiting the next morning.
Which data does Joinly take from HR2Day?
Only what is needed to decide on an account and the right permissions: employee number, name (including preferred and partner name), date of birth, start and end date, business and private contact details, department, manager and job title. Salary, absence and appraisal data stay in HR2Day. Which field ends up where is yours to set in the field mapping.
Does Joinly write anything back to HR2Day?
Optionally. Joinly can write the username (UPN), the email address and the phone number back into HR2Day, so HR can see which account belongs to which employee. You switch that write-back on or off yourself; by default the integration runs one way, out of HR2Day.
Will Joinly overwrite our existing accounts?
No. Joinly first imports your existing environment and matches the accounts it finds there to the employees from HR2Day. Existing accounts are recognised and adopted rather than created twice. Which matching strategy applies — person identifier, employee number or UPN — is yours to choose.
Can we try this without risk first?
Yes. You run the import as a dry run first: Joinly calculates everything, writes nothing, and hands you an Excel export of exactly what would happen. After that a threshold keeps watching. If HR2Day delivers more new, activated or deactivated employees in one run than you allowed, Joinly blocks the import instead of executing it.
What about people who are not in HR2Day?
Contractors, hired staff and interns are registered directly in Joinly or through a second source. From then on they follow the same lifecycle as the employees from HR2Day, end date included — so temporary access expires by itself instead of lingering.
Can we connect HR2Day to several systems at once?
Yes. A single HR source can feed both Microsoft Entra ID and an on-premises Active Directory, plus your business applications and your ITSM system. Hybrid organisations use that to keep cloud and on-premise following the same truth. Several HR sources side by side is possible too.
How long does it take to set up the HR2Day integration?
The integration is a matter of configuration, not development: Joinly collects employees from one normalised endpoint, so nothing has to be built into the platform to support HR2Day. The work is in the agreements — which fields lead, which naming convention you use and which permissions belong to which job. Most organisations start with onboarding and expand into role changes and offboarding afterwards.
Is the integration secure, and does it cover our audit obligations?
Joinly is ISO27001-certified. Traffic with HR2Day runs over a secured connection with its own authentication key, and every change Joinly makes is recorded. At audit time you can show who was given which access when, why it was granted and when it was revoked again.
What does the integration cost?
The integration is part of the subscription — you pay per account per month, not per connector. The pricing page shows what the plans cost and what each one includes.
More about HR2Day
HR2day koppeling via Joinly: Slim en veilig gebruikersbeheer
Veel organisaties gebruiken HR2day als centraal HR- en salarissysteem. Het bevat alle actuele gegevens van medewerkers – van contracten en functies tot afdelingen en mutaties. Maar zolang HR2day niet gekoppeld is aan je IT-omgeving, blijft gebruikersbeheer een handmatig en foutgevoelig proces.
Waarom handmatig gebruikersbeheer met HR2day niet meer werkt
Zonder koppeling tussen HR2day en je applicaties lopen HR en IT vaak tegen dezelfde problemen aan:
IT moet accounts handmatig aanmaken of beheren via Excel, e-mail of losse lijsten
Nieuwe medewerkers wachten onnodig op toegang tot hun systemen en applicaties
Accounts van vertrokken medewerkers blijven te lang actief, met beveiligingsrisico’s tot gevolg
HR en IT werken langs elkaar heen, waardoor inconsistentie en frustratie ontstaan
Het resultaat: hogere werkdruk, meer kans op datalekken en vertraging bij onboarding.
De oplossing: automatische koppeling van HR2day met Joinly
Met Joinly koppel je HR2day direct aan je bedrijfsapplicaties en IT-systemen. Onze standaard HR2day koppeling automatiseert het volledige proces van user provisioning en deprovisioning. HR wordt leidend, terwijl IT alleen nog hoeft te controleren in plaats van uit te voeren.
Dit levert de HR2day koppeling op:
Nieuwe medewerkers krijgen automatisch toegang tot de juiste applicaties
Wijzigingen in functie, afdeling of contract worden direct doorgevoerd
Accounts worden veilig gedeactiveerd zodra iemand uit dienst treedt
HR en IT werken vanuit één betrouwbare bron van waarheid
Dankzij de koppeling ontstaat er een gestroomlijnde HR-IT keten: veiliger, efficiënter en zonder handmatige acties. Het resultaat: minder risico’s, lagere werkdruk en een veel snellere onboarding.
Op zoek naar een HR2day koppeling die veilig, betrouwbaar en toekomstbestendig is? Met Joinly wordt gebruikersbeheer eenvoudig, foutloos en volledig geautomatiseerd.
Where to go next

Connect HR2Day to Microsoft Entra ID
Entra ID is the first target system for most organisations. See exactly what the integration between HR2Day and Entra ID creates, changes and revokes.
Connect HR2Day to Entra ID
Do you want toHR2Dayintegrate with (Azure) Active Directory?
Joinly natively integrates your HR system with (Azure) Active Directory. View our page for the integration with (Azure) Active Directory / Microsoft Entra ID for more information!
HR2Day integrate with (Azure) Active Directory
Further reading
Waarom wordt Identity en Access Management steeds belangrijker in het onderwijs, en wat automatiseer je het beste eerst?
Identity en Access Management wordt belangrijker omdat onderwijsinstellingen steeds meer systemen gebruiken, terwijl de digitale dreiging toeneemt en de eisen rond toegangsbeheer strenger worden. Het account van een medewerker is vaak de toegangsdeur tot gevoelige data, dus tijdige toekenning en intrekking van rechten zijn cruciaal. Begin met automatiseren waar het risico en de werklast het grootst zijn: het aanmaken, wijzigen en intrekken van medewerkersaccounts vanuit het personeelssysteem.
Wat vraagt het toetsingskader van SURFaudit op het gebied van toegangsbeheer voor medewerkers, en hoe automatiseer je dat?
Het toetsingskader van SURFaudit verlangt dat een instelling toegang van medewerkers gestructureerd toekent, wijzigt en intrekt, en dat aantoonbaar kan maken. Toegangsrechten mogen niet ruimer zijn dan nodig en moeten worden aangepast of ingetrokken zodra het dienstverband verandert of eindigt. Om volwassenheidsniveau 3 te halen, moet dit proces gedocumenteerd, formeel en aantoonbaar zijn. Automatisering vanuit het personeelssysteem maakt precies dat mogelijk.
How do I automatically revoke accounts of departing employees?
Integrate your HR system with an orchestration layer that runs on top of Microsoft Entra ID or Google Workspace. As soon as an employee-status is set to inactive in the HR system, this layer disables the account, revokes access rights, and logs every step. This ensures offboarding occurs automatically on the correct date, without manual ICT department action required.
Volwassenheidsniveau 3 bereiken voor toegangsbeheer
Zowel het Normenkader IBP (funderend onderwijs) als het toetsingskader van SURFaudit (mbo en hoger onderwijs) hanteren volwassenheidsniveau 3 als streefniveau. Voor toegangsbeheer betekent niveau 3: het beleid is vastgelegd, de uitvoering is geautomatiseerd en consistent, en je kunt aantonen dat het werkt. Geautomatiseerde provisioning vanuit het personeelssysteem brengt je daar het snelst.
Normenkader IBP of Cyberbeveiligingswet: wat is het verschil?
Het Normenkader IBP is de afgesproken norm voor digitale veiligheid in het funderend onderwijs (po en vo), met een zelfevaluatie vanaf 2027. De Cyberbeveiligingswet is echte wetgeving, de Nederlandse uitwerking van de Europese richtlijn NIS2, en geldt onder meer voor hbo en wo. Beide leggen veel nadruk op toegangsbeheer, maar ze verschillen in status, doelgroep en tijdlijn.
Browsing is free
Schedule a demo
In 30 minutes, we would love to show you how Joinly adds value to your entire organisation.
Schedule a demo