HR and identity
Carry each employee change from the HR decision to the work it requires.
A hire, transfer or departure involves more than an updated employee record. Identity, collaboration, service requests and payroll-related work each need the right context and an accountable owner. Nexus can coordinate those steps on one execution layer, keeping employment data in its source system and linking each downstream action to the event and approval that authorized it.
- Processes in this department
- 14Processes in this department
- Systems they run across
- 8Systems they run across
- Customer stories
- —Customer stories
- On your infrastructure
- Self-hostedOn your infrastructure
The work
What hr and identity runs on Nexus
Recruitment and onboarding
Connect the approved recruitment or hire event to employee setup, collaboration preparation and assigned service tasks. Keep the employment decision distinct from the fulfillment work it initiates.
Transfers and access changes
Apply effective-date and identity mappings to route the required access and assignment changes. Privileged or exceptional requests wait for the appropriate owner before execution.
Departures and handover
Coordinate the approved departure scope, handover preparation and access-removal work. Keep individual completion outcomes visible against the originating employment event.
Attendance and payroll preparation
Carry approved time and assignment inputs through validation, review and the configured payroll handoff. Corrections retain their source, effective period and named decision owner.
HR request and application review
Use model-assisted reading, classification or summaries where they support recruiter and HR review. The resulting material enters the same permission, approval and record-keeping process as other department work.
Consolidation
One layer, not one integration at a time
The HR record may show a completed change while identity work and service tasks still sit in separate queues. Nexus can connect them through one workflow execution model, with versioned mappings, named approvals and a common record of what each destination accepted. HR and IT can inspect the handoff, see which tasks remain outstanding and revise the applicable workflow policy without tracing the employee's change through disconnected automation tools.
Ownership
Where a person decides
Recruiters make progression and rejection decisions, HR approves employment changes and employee-specific advice, payroll owns time corrections and pay treatment, and identity authorities approve access changes. The workflow carries these distinct decisions rather than treating one approval as permission for everything downstream. Each authorized action retains its owner, effective scope and system response.
AI for HR and identity operations Where a model is worth the call in this department, and where a rule already settles it.
14 processes
HR and identity use cases
Explore HR and identity workflows covering recruitment, employee lifecycle changes, access, collaboration, attendance and model-assisted review.
Public sector
Joiner, mover, leaver for public employees
Workday + Okta + Microsoft 365
Workforce changes become policy-checked identity changes, with collaboration set up and removed on time.
Defense & national security
Privileged access change with approval
ServiceNow + Okta + Microsoft 365
Privileged access is granted only after named approval, with every change recorded.
Defense & national security
Secure collaboration onboarding
Workday + Okta + Microsoft 365
New staff receive only the identity groups and collaboration spaces their role allows, after approval.
Financial services
Identity changes for regulated staff
Workday + Okta + ServiceNow + Microsoft 365
Access changes for regulated roles carry a case record, approval and full evidence.
Healthcare
Healthcare employee onboarding
Workday + Okta + Microsoft 365
New staff get the identity access and collaboration their role needs, after approval.
Critical infrastructure
Identity access change for operations staff
Workday + Okta + ServiceNow
Operations staff access follows their role, with changes approved and recorded.
Enterprise
Employee lifecycle automation
Workday + Okta + Microsoft 365 + ServiceNow
Joiners, movers and leavers are handled end to end with a case record and approval.
Enterprise
BambooHR employee onboarding
BambooHR + Okta + Microsoft 365
New employees get approved access and collaboration setup from BambooHR records.
Enterprise
Personio onboarding and attendance workflow
Personio + Okta + Microsoft 365
Personio records drive approved access and attendance follow-up with exceptions recorded.
Enterprise
ADP recruitment to employee access
ADP Workforce Now + Okta + Microsoft 365
Accepted applicants and work assignments in ADP lead to approved access on day one.
Enterprise
Candidate screening with human review
Workday + OpenAI + Microsoft 365
Recruiters receive source-backed comparisons of applications against explicit role requirements, with decisions left to people.
Enterprise
HR request classification and routing
Personio + ServiceNow + OpenAI
Employee requests reach the authorized HR owner with a proposed category and a reviewable response draft.
Enterprise
Leaver summary for handover
Workday + Okta + OpenAI
Handover owners receive a source-linked summary of known responsibilities and recorded access before departure actions are approved.
Enterprise
Timesheet anomaly review before payroll
ADP Workforce Now + Workday + OpenAI + ServiceNow
Payroll reviewers see unusual time entries with source context and a reason to investigate before making corrections.
Systems in scope
What hr and identity processes connect
Counted across the processes above. Anything outside a pre-built action runs through an API, protocol or database call, or as Rules + Code.
Talk to a solutions engineer
Bring one hr and identity process you want to consolidate
We will map the handoffs it crosses today, where the approval belongs, which steps stay deterministic and what the run record has to show afterwards.
- Runs on your infrastructure, including air-gapped.
- Your systems keep their own records.
- Existing automation can be invoked rather than rewritten.
FAQ
HR and identity: common questions
- Does Nexus become our employee directory or identity provider of record?
- These workflows coordinate the HR and identity systems you choose; the design defines which existing system owns each employee field, identity and entitlement.
- Do all downstream actions follow automatically from an HR change?
- They follow the configured policy and their required approvals. A confirmed hire can initiate preparation, while privileged access or a payroll correction still needs its designated authority.
- How can this support different operating environments?
- Nexus is self-hosted and can run on-premises or air-gapped. A fully isolated workflow uses sources and interfaces available within that boundary; connected cloud applications require approved connectivity.
- Where are the AI-assisted HR scenarios explained?
- See AI for HR and identity operations at /solutions/ai-for-hr for application review, request classification, handover summaries and time-entry review.
Architecture session
Map your hr and identity processes onto one execution layer
We will go through what you run today, which parts already work, and what consolidating the execution path would actually change.