How to integrate ADManager Plus with ADP to streamline identity life cycle management

• Log in to ADManager Plus.
• Navigate to the Automation tab and click HCM Integrations.
• Under HCM applications, click the Custom HCM tile to integrate a new custom HCM solution.
• In the Custom HCM Integration window that pops up, enter a suitable Name and Description, upload a Logo for ADP, and click Save.
• Click the ADP tile added in the previous step to configure API authorization methods, endpoints, and LDAP data mapping.
• In the Authorization section, select OAuth 2.0 as the Authorization Type, fill in the following details, and click Configure.
  • Header Prefix: Specify a prefix value for your authorization header.
  • OAuth 2.0 Grant Type: Select Client Credentials is the as the grant type.
  • Callback URL: The Callback URL is where you will be redirected to after authentication. This should be registered with the API provider.
  • Access Token URL: Specify https://accounts.adp.com/auth/oauth/v2/token as the Access Token.
  • Client ID and Client Secret: Enter a valid ID and its secret key.
  • Scope: Specify the data you would like to access.
  • Click Advanced Options to choose the header and query parameters, upload the certificate and key (.crt and .key files, respectively), and provide a passphrase.
  
• In the API Endpoint Configuration section, add the following:
  • Endpoint URL: https://accounts.adp.com/hr/v2/workers
  • Click Advanced Options to add headers and parameters.
  • Method: Choose Get.
  • Headers: Click and configure the respective HTTP headers as configured in the endpoint.
  • Parameters: Click and configure the query parameters as configured in the endpoint.
  • Message Type: Select None.
  • Check the Repeat calling this Endpoint option to repeatedly call the API until you get the required response. From the drop-down menu, select the parameter and specify the increment value. You can also set a condition, which when satisfied calls the endpoint repeatedly. For instance, you can configure a condition to fetch a maximum of 100 users per call using the $skip and $top parameters.
  Note: You can configure multiple endpoints for an HCM solution.
• Once done, click Test & Save. A response window will display all the requested elements.
• Click Data Source - LDAP Attribute Mapping to match endpoints and to map AD LDAP attributes with the respective attributes in the HCM solution.
• Enter the Configuration Name and Description, and select the Automation Category from the drop-down menu.
• In the Select Endpoint field, select those columns that are unique to users (employeeIdenifier, username, etc.) but hold the same value in all the endpoints.
• In the Attribute Mapping field, select the attribute from the LDAP Attribute Name drop-down menu and map it with the respective column in the HCM solution.
• Click Save.

Actions supported

Upon integration, administrators can configure automations to carry out desired tasks. These automations can be monitored and controlled by implementing multi-level business workflows, which ensure that they are reviewed and approved before execution. The following actions can be automated:

• Create user accounts
• Add users to groups
• Modify user attributes
• Remove users from groups
• Modify user accounts by Template
• Create mailbox
• Reset passwords
• Disable or delete mailbox
• Unlock user accounts
• Move Home Folder
• Enable user accounts
• Delete Home Folder
• Disable user accounts
• Revoke Microsoft 365 licenses
• Delete user accounts
• Manage users' photos
• Run custom scripts
• Disable Lync accounts
• Move users across groups
• Configure auto reply settings