The problem
New-hire provisioning is one of the highest-stakes IT workflows: every new employee needs an Okta or Entra account, an email license, group memberships, project access, and welcome materials — all by their start date. When this is manual, IT is racing against day-one expectations across three to five disparate systems, and forgotten steps surface as ticket backlog in week two.
What AscendCore does
An HR or IT lead initiates new-hire provisioning from Microsoft Teams, Slack, or a webhook from a system of record (Workday, BambooHR). AscendCore proposes the full provisioning flow — account creation, license assignment, group memberships — gated behind a single approval card. On approval, AscendCore executes each step with verification and rollback discipline, and surfaces a summary back to the requester.
Workflow
- Trigger — chat command (
/new-hire <First> <Last> <email>), HR system webhook, or admin-portal form - Validate — verify the email isn't already provisioned; check license-pool availability
- Propose — single approval card listing every step (account, license, groups, welcome kit)
- Approve — one-click approval routes to hr-ops + it-admins (configurable)
- Execute — Okta user creation, M365 license assignment, group memberships
- Notify — manager + new hire DM'd with credentials and onboarding link
- Audit — every step logged, including step-level success/failure and retry status
Integrations
- Okta — User creation API, group assignment, activation email
- Microsoft 365 (Entra ID + M365 admin) — License pool checking, license assignment, distribution-list membership
- Jira / Atlassian — Project access provisioning (optional, role-aware)
- Slack + Microsoft Teams — Notification delivery to new hire and manager
Status
Live in production for the core flow (Okta create + M365 license assign). Group membership as part of new-hire provisioning is on the roadmap.
