- Overview
- Configuration
HiBob
Automate and streamline user lifecycle management with HiBob and ADManagerPlus integration
Connect HiBob to your Active Directory by integrating it with ADManager Plus. Integrating ADManager Plus with HiBob enables organizations to seamlessly manage user lifecycle processes by automating everything from employee onboarding to offboarding, reducing the dependency on HR teams.
Automated, error-free employee life cycle management
Onboard, manage, and offboard users automatically to and from enterprise applications with REST API support and leave no room for data entry errors.
Accelerate business productivity
Securely assign permissions and access to resources as and when employees are provisioned to improve productivity.
How to integrate HiBob with ADManager Plus
Prerequisites
HiBob uses basic authentication credentials to authorize API requests.
Authentication credentials required: Service user’s ID as the username and auth token as the password.
Privileges
- To import users (inbound action): Ensure the account used for authorization has permission to read all user accounts.
- To perform any action or query in HiBob (outbound action): Ensure the account used for authorization has permission to perform the desired action.
Authorization configuration
- Log in to ADManager Plus and navigate to Directory/Application Settings.
- Go to Application Integrations, then search for and select HiBob.
- Toggle the Enable HiBob Integration button on.
- On the HiBob Configuration page, click Authorization.
- Enter the authentication credentials. Use service user’s ID as the username and the auth token as the password.
- Click Configure.
Inbound webhook configuration
Inbound webhooks enable you to fetch user data from HiBob and send it to ADManager Plus. To configure an inbound webhook for HiBob:
- Under Inbound Webhook, click Hibob Endpoint Configuration.
- An endpoint, Hibob USERS ENDPOINT, comes preconfigured with Endpoint URL, HTTP Method, Headers, and Parameters fields to fetch user accounts from HiBob. If you prefer to use a new endpoint to import users, you can configure one by clicking + Add API Endpoint and filling in the required fields according to HiBob's API references. Click here to learn how. Note:
- The Authorization Header is preconfigured as a header for authenticating API requests as configured during authorization configuration.
- Refer to HiBob's API references and configure additional headers and parameters, if required.
- Macros can be added to the endpoint URL, headers, parameters, and message body to dynamically modify the configuration using the macro chooser.
- Once done, click Test & Save to validate and save the endpoint, or click Save as Draft to store the configuration as a draft without testing the endpoint. If you choose Test & Save, a response window will be displayed. This response window includes the following tabs:
- Response: Displays API response parameters in a tree structure. You can set the datatype for each field:
- Text (default)
- Number
- Timestamp
- Array
Text, Number, and Timestamp are used for advanced filter criteria. Array is used to select a specific value from a response array (refer to JSON conditional parsing).
- Response Details
Displays the complete response message in text format.
- Request
Displays the request headers, parameters, and message body.
- Response: Displays API response parameters in a tree structure. You can set the datatype for each field:
- Click Save. Note: You can configure multiple endpoints for Hibob using the + Add API Endpoint button. Click here to learn how.
- Click Data Source - LDAP Attribute Mapping to match endpoints and to map AD LDAP attributes with the respective attributes in Hibob. ADManager Plus also lets you customize attribute format from Hibob.
- Click + Add New Configuration and perform the following:
- Enter the Configuration Name and Description and select the Automation Category from the drop-down menu.
- In the Select endpoint field, select the desired endpoint and a Primary Key that is unique to a user (e.g. employeeIdentifier). Note: When multiple endpoints are configured, this attribute must hold the same value in all the endpoints.
- In the Attribute Mapping field, select the attribute from the LDAP Attribute Name drop-down menu and map it to the corresponding column in HiBob. Macros are also supported in attribute mapping. To create a new custom format, click Add New Format.
- Click Save.
Outbound webhook configuration
Outbound webhooks enable you to update the changes made in AD using ADManager Plus to HiBob or fetch or forward required details from HiBob and synchronize them with AD.
To configure an outbound webhook for HiBob:
- Under Outbound Webhook, click HiBob Webhook Configuration.
- Click + Add Webhook.
- Enter a name and description for this webhook.
- Decide on the action that has to be performed and refer to HiBoB's API references for the API details, such as the URL, headers and parameters.
- Select the HTTP method that will enable you to perform the desired action on the endpoint from the drop-down menu.
- Enter the endpoint URL.
- Configure the Headers, Parameters, and Message Type in the appropriate format based on the API call that you would like to perform. Note: Macros can be added to the endpoint URL, headers, parameters, and message body to dynamically modify the configuration using the macro chooser.
- Click Test & Save to validate and save the webhook, or click Save as Draft to store the webhook as a draft without testing.
- If you select Test & Save, a response window is displayed. Choose the user or group on which the API request should be tested and click OK. This triggers a real-time call to the endpoint URL, allowing you to verify whether macros are applied correctly. You may skip selecting a user or group. However, if you do make a selection, the macros present in the webhook will be parsed using the selected object’s values:
- Response: Displays API response parameters in a tree structure. You can set the datatype for each field:
- Text (default)
- Number
- Timestamp
Text, Number, and Timestamp are used for advanced filter criteria.
- Response Details
Displays the complete response message in text format.
- Request
Displays the request headers, parameters, and message body.
- Response: Displays API response parameters in a tree structure. You can set the datatype for each field:
- Verify them for the expected API behavior and click Save.
Actions supported:
Upon integration, administrators can configure automations to carry out the desired tasks. These automations can be monitored and controlled by implementing multi-level business workflows, which ensure that they are reviewed and approved before execution. The following actions can be automated:
- Create user accounts
- Modify user attributes
- Modify user accounts by template
- Reset passwords
- Unlock user accounts
- Enable user accounts
- Disable user accounts
- Delete user accounts
- Run custom scripts
- Move users across groups
- Add users to groups
- Remove users from groups
- Create mailbox
- Disable or delete mailbox
- Move Home Folder
- Delete Home Folder
- Revoke Microsoft 365 licenses
- Manage users' photos
- Disable Lync accounts
- Configure auto reply settings