Onboarding Validation Checklist

Before you begin

1. Verify your downstream applications connected to Clarity are configured correctly

   1. Check the Trust Permission setting for each application

   2. Check each application has an appropriate username rule configured for it

2. Complete the Role Configuration Checklist

3. Designate a Role to be used for testing, it's good to have a wide range of applications included in this role for testing purposes.

1. Create custom “Identity Creation” workflow with a “Condition: Identity Attribute” to limit the scope of the workflow 

   1. Provide a name that makes it obvious this role is for testing

   2. Add Trigger: Identity Created

   3. Add Action: Find/Create Identity Role

   4. Add Condition Identity Attribute or Identity Roles (to limit the scope of workflow for testing)

   5. Optional: Add any approvals (Action: Create Identity - Approval Request) in the workflow before the provisioning step.

   6. Add Action: Provision Identity

   7. Optional: Add any notifications (Action: Send Email - Identity Created) to the workflow as needed for your process.

   8. Click the blue Save button in the upper right

2. Create a custom “Under-Provisioned” workflow

   1. Choose a name to indicate this workflow is for testing

   2. Add Trigger: UnderProvisioned Identity Detected

   3. Use a Condition (Identity Attributes or Identity Roles) to limit the scope of the workflow to a particular Department, or Department and Job Title, or Role

   4. Add Action: Provision Identity

   5. Click the blue Save button in the upper right

3. Modify existing Creating Identities Workflow

   1.  Remove the Action: Provision Identity (this is to prevent Identities created outside the scope of your testing dont get provisioned).

   2. Click the blue Save button in the upper right

4. Enable your custom Identity Created workflow

5. Enable your custom UnderProvisioned Detector workflow

6. Create a Test user in your HRIS with the appropriate attributes to match your Organizational Units

7. Wait or Sync the above application to trigger Clarity to pull in the user

   1. After the sync is complete, refresh your webpage, and search for your Test user

8. For each application with an associated entitlement on the role, check that the downstream service user was created as expected, with all relevant attributes.

9. For each application with an associated entitlement on the role, check that all of the expected entitlements

10. Re-Enable or add the Provisioning Step to your Identity Creation workflow

11. Re-Enable or remove condition steps from your Under-Provisioned Detector workflow