As you are Administrator you can use periodic validation to verify that employees registered in IAMconnected are still allowed access.

When an employee leaves the company all authorizations must be revoked immediately; including for IAMconnected. This prevents former employees from having unauthorized access to data. In practice, however, this does not always happen. Through periodic validation, you can revoke any unjustified authorizations.

It is advised to agree with your human resources department that you will be informed when employees (including hired staff) leave. You can then revoke the authorization. You can disconnect an employee immediately or enter a date in the future. This is useful, for example, for employees on temporary contracts.

How do I set up periodic validation?

Please go to tab ‘Organization Management – My Organizations – [select organization] – Enable Periodic Validation’. Choose the desired frequency for receiving the reminder email for periodic validation. This email will be sent to both the Top-Level Administrator and all user administrators.

How do I perform the periodic validation?

In ‘User Management’, click on ‘Employees’. You will see an overview of all the users in your organization. The “Date Approved” column shows when the users were last approved and/or validated.

Click on an employee, check the information displayed and whether the employee can have access. Is this the case? Then click on “Validate User. The ‘Date Approved’ will now be changed to the current date. Should the user no longer have access? Then you can temporarily suspend it with ‘Suspend user’.

Tip

Click on “Date Approved” to sort the users by the approval date. This allows you to start validation with the user approvals dating back the longest period.

How do I validate a large group of users?

Use ‘Download user overview’ to download an up-to-date overview of all active employees. The file has a csv format that can be opened with Excel or another program.

You can compare this file with an internal current list of users by matching the email address, for example. In this way you can determine which users to disconnect.

After disconnecting, you can again download a current overview and thereby verify that all users in IAMconnected now match your own current administration.

Tip: Archive the above so you can show it for any subsequent questions or audits.