• Overview
  • Configuration

Related-apps

AFAS Software

Sync employee data from AFAS Software with ADManager Plus to automate account provisioning in Active Directory.

Identity provisioningHCM

AFAS Software is a cloud-based HR and payroll platform widely used in the Benelux region. It offers functionalities like employee self-service, manager self-service, absence and leave management, payroll processing, and built-in business intelligence dashboards. Integrating AFAS Software with ADManager Plus allows organizations to sync identity life cycle events, such as new hires, role changes, and terminations, from AFAS Software into Active Directory (AD) automatically. This ensures timely account provisioning, accurate access control, and secure offboarding, while reducing the administrative burden on HR and IT teams.

 

Automated onboarding

Create AD accounts for new employees added in AFAS Software, with correct roles and permissions.

 

Account updates

Sync role or department changes from AFAS Software to update AD group memberships and attributes.

 

Secure offboarding

Disable or delete AD accounts when users are offboarded in AFAS Software to prevent unauthorized access.

 

Authorization configuration

  • Log in to ADManager Plus and navigate to Directory/Application Settings.
  • Go to Application Integrations, then search for and select AFAS Software.
  • Toggle the Enable AFAS Software Integration button on.
  • In the AFAS Software Configuration page, click Authorization.
  • Perform the steps to generate the API Keys and API Token in AFAS Software.
  • Replace {{base64 token}} in the Value field with the API token generated.
  • Click Configure.

Inbound webhook configuration

Inbound webhook enables you to fetch user data from AFAS Software to ADManager Plus. The attribute mapping configured in this section can be selected as the data source during automation configuration. To configure an inbound webhook for AFAS Software:

  • Under Inbound Webhook, click AFAS Software Endpoint Configuration.
  • In the Endpoint Configuration tab, an endpoint, AFAS Software Get All Employees Endpoint, comes preconfigured with an Endpoint URL, API Method, Headers, and Parameters fields to fetch user accounts from AFAS Software. However, if you would like to use a new endpoint to import users, you can configure one using the + Add API endpoint button and filling in the required fields as per AFAS Software's API references. Click here to learn how. Note:
    • The API key value pair is preconfigured as a header for authenticating API requests as configured during Authorization Configuration.
    • Refer to AFAS Software's API references and configure additional headers and parameters if required.
  • Once done, click Test & Save. A response window will display all the requested parameters that can be fetched using the API call. Click Proceed. Note:
    • Refer to AFAS Software's API references to understand the Parameters that must be configured to fetch only specific parameters.
    • You can configure multiple endpoints for AFAS Software using the + Add API endpoint button. Click here to learn how.
  • Click Data Source - LDAP Attribute Mapping to match endpoints and to map AD LDAP attributes with the respective attributes in AFAS Software. Note: ADManager Plus also lets you customize attribute format from AFAS Software.
  • Click + Add New Configuration and perform the following:
    • Enter the Configuration Name and Description and select the Automation Category from the drop-down menu.
    • In the Select Endpoint field, select the desired endpoint and a Primary Key that is unique to a user (e.g., employeeIdentifier). Note: When multiple endpoints are configured, this attribute must hold the same value in all the endpoints.
    • In the Attribute Mapping field, select the attribute from the LDAP Attribute Name drop-down menu and map it with the respective column in AFAS Software.
    • If you would like to create a new custom format for this, click Add New Format
    • Click Save.
Note: The attribute mapping configured in this section can be selected as the data source during automation configuration to perform the desired action on the list of users received from the API response.

Outbound webhook configuration

Outbound webhook enables you to update the changes made in AD using ADManager Plus to AFAS Software or fetch required details from AFAS Software and synchronize them with AD. To configure an outbound webhook for AFAS Software:

  • Under Outbound Webhook, click AFAS Software Webhook Configuration.
  • Click + Add Webhook.
  • Enter a name and description for this webhook.
  • Decide on the action that has to be performed and refer to AFAS Software's API references for the API details, such as the URL, headers, parameters, and other requirements that will be needed.
  • Select the HTTP method that will allow you to perform the desired action on the endpoint from the drop-down menu.
  • Enter the endpoint URL.
  • Configure the Headers, Parameters, and Message Type in the appropriate format based on the API call that you would like to perform.
  • Click Test and Save.
  • A pop-up window will then display a list of AD users and groups to test the configured API call. Select the desired user or group and click OK. This will make a real-time call to the endpoint URL, and the selected objects will be modified as per the configuration.
  • The webhook response and request details will then be displayed. Verify them for the expected API behavior and click Save.
Note: The webhooks configured in this section can be included in Orchestration Templates, which can be used in event-driven and scheduled automations. They can also be applied directly to desired users to perform a sequence of actions on them (under Management > Advanced Management > Orchestration).