IAM → service workflow
Connect the identity outcome to service records and equipment tasks, while HelloID retains IAM execution.
All integrations
Workplace & access
Connect an approved lifecycle outcome or request from HelloID to Service Automation Suite. This lets the service process follow up workplace assets, records, tickets and exceptions. Configuration depends on available HelloID APIs and permissions.
From product to process
How to use the integration
Handover & return
Connect staff changes to equipment handover and confirmed return.
Exceptions → tasks
Route missing information or discrepancies to the team responsible for follow-up.
Combine into one controlled process
Data → rules → execution-
Combine
HR + HelloID outcome + equipment
-
Determine & check
Connect confirmed identity outcome to service
-
Execute & report back
Start equipment task · Update records · Return outcome
Check sources and rules, test changes and track the outcome. Manual tasks get an owner and confirmation.
Build visually. Manage easily.
Reuse building blocks, adapt your process and test the change. Manage it yourself, together with us or let Scope4mation take care of it.
More process examples & technical details
The work between your applications
Change requested.
Who handles the next steps?
Service Automation Suite connects HelloID with your other applications, people and rules. Keep data aligned, work moving and outstanding actions visible.
A change, request or alert
Service Automation Suite
Data, people, assets and relationships on one foundation.
- Compare
- What exists? What should exist?
- Determine what is needed
- Matrix · policy · legal requirements
- Coordinate the next steps
- Checks · tasks · approvals · actions
Execution ↔ feedback
Your people and tools
For example. Also with other teams, suppliers and applications.
Verify. Inform. Report.
What is complete? Who needs to act? Which exception needs attention?
IAM & auditability
From access decision to demonstrable execution.
A closed ticket does not explain why access was granted or what actually happened. Connect the IAM decision to approval, TOPdesk activities and outcomes from the systems involved. Support auditability and accountability, including within BIO2.
Applied rules, actions & exceptions
Combine the data with your policy, risk assessments and checks. Request information or a decision where needed, track actions and record the outcome.
Person, request, reason & approval
Microsoft Entra IDActivities, outcome & follow-up
Record the decision with the request
Connect the person, reason and required approval to the requested access or assets.
Connect activities to actual outcomes
Return system actions and manual confirmations to the TOPdesk change and activities. A sent command does not prove successful execution.
Keep exceptions actionable
Show what was executed, what differs and who must act. This supports controls and reviews; compliance also requires appropriate policies and operations.
Employee lifecycle
IAM is ready. Are assets and service tasks ready too?
Connect an approved lifecycle outcome or request from HelloID to Service Automation Suite. This lets the service process follow up workplace assets, records, tickets and exceptions. Configuration depends on available HelloID APIs and permissions.
Combine data and apply rules
Combine the data with your policy, risk assessments and checks. Request information or a decision where needed, track actions and record the outcome.
Relevant data or workflow status
Microsoft Entra IDUpdate, execute and record outcomes
HelloID handles identity
HelloID performs the agreed account and entitlement change or product request within the available modules.
Service Automation Suite connects the next steps
A relevant outcome or event can start a service task, CMDB check or supplier action without rebuilding the identity logic.
Teams can track the outcome
Service Automation Suite records feedback and exceptions with the right process owner, with a clear boundary between the two systems.
Handover & return
Every asset has an owner. Even after a change.
Connect devices and records to the employee and the actual handover. A missing device is not automatically a returned laptop.
Combine data and apply rules
Combine the data with your policy, risk assessments and checks. Request information or a decision where needed, track actions and record the outcome.
Relevant data or workflow status
Update, execute and record outcomes
Link person and asset
Combine available user and asset data with employee records.
Coordinate handover or return
Have the responsible person confirm the handover and update agreed relationships.
Keep open actions visible
Follow up missing returns and outdated relationships on reassignment or departure.
Under the hood
How to connect, test and manage the integration.
For administrators who want to understand how it works: connect HelloID to your other applications, map the data and use the response in the next step. Configure it centrally in Service Automation Suite.
Example configuration · shaped by your process
Execute and verify an account or group action
Connect and test
API ComposerChoose the API method, URL and authentication. Manage the host and credentials in an environment. Test a request in Discovery and inspect the fields actually returned by the API.
Combine and compare
Data Flow ComposerSelect fields, translate codes and relate records using shared data. Compare source and target to identify new, changed or incomplete records.
Execute and use the response
API ComposerBuild the request body from validated data and inspect Body Preview before testing. Use the result ID in Data Context for the next request or save output to an entity. Configure write-back separately.
Recognise errors and follow up deliberately
API ComposerConfigure error rules by HTTP code and/or message. A temporary API failure can use bounded retries. A missing relationship or rejection needs another route: record the cause and configure a verification task for the appropriate team, for example.
Which data do you maintain?
An example configuration, not fixed field names or a mandatory combination.
- Person reference and account ID
- Connect the source person to the correct account using verified identifiers.
- Approved role and desired groups
- Compare the agreed matrix with available account data and configure additions and revocations separately.
- Account action result
- Use the API response and configured follow-up check to report back to HR or TOPdesk, for example.
Sent ≠ processed. Use the response and agreed validation to determine the next step.
Need to publish data yourself?
Use Endpoint Composer to publish a configured Service Automation Suite data object. Choose read and write methods and security profiles so a customer can retrieve agreed service data or a supplier can submit information, for example. Configure data selection and subsequent processing separately.
Endpoint ComposerFrom data to a complete process?
Combine the integration with a form, a shared matrix, a review or collaboration between service teams. For example, an approved request leads to execution in Microsoft Entra, a ValidSign signature request and feedback in TOPdesk. Your process determines the steps needed; not every use case requires all these components.
Explore the connected building blocksBeyond the first integration.
Use the same data and rules in your next process.
Start with one use case. Connect customer, employee and asset data, for example, and agree which source is authoritative. Reuse those relationships, a matrix where needed and configured actions in the next workflow. Agree who maintains the data and rules. Expand without repeatedly connecting and maintaining the same information.
Signature declined. Keep the process moving.
A request awaits a ValidSign signature. Declining, expiry and technical failure each need different handling.
- Combine
- Link the request, signing request and document. Read the available status and apply agreed conditions to determine the next action.
- The outcome determines what follows
- Signed: process the document and confirm the activity. Declined: route the reason to the owner. Temporary technical failure: retry only under the configured error rule.
- The benefit
- Appropriate follow-up for each outcome without counting a sent signing request as completed work.
A replacement laptop without losing context.
An employee receives a replacement device. The old asset, new record and open service or security tickets must remain connected.
- Combine
- Use the central relationship between owner and device identifiers. Combine handover, technical inventory and return with existing tickets.
- The outcome determines what follows
- Receipt confirmed: update ownership and relationships. Old device missing or uncertain match: start a targeted review instead of overwriting historical records.
- The benefit
- Current records and a traceable handover even when a management tool uses different names.
Temporary access, with the end handled too.
Additional access is approved for a limited period. A checkbox alone does not preserve why, for whom and until when.
- Combine
- Connect identity, approval, expiry date and the available access action. Reuse the same data for a scheduled follow-up check.
- The outcome determines what follows
- Revocation confirmed: record the result. Extension requested: ask for a new decision. Not revoked: raise the exception with the authorised group rather than silently completing it.
- The benefit
- Fewer forgotten exceptions and a traceable relationship between approval and actual access.
Your process needs more than a standard action?
Configure the missing API request, input and output in API Composer. Use its response in the next step and combine it with data tables, forms and automations. Extend the same product and reuse the configured building blocks.
Use Service Automation Suite to update a ticket in TOPdesk, for example, with fields available through its API, such as category, priority, status and support group. For another application, configure its request and field mapping. The outcome determines the next action: confirm, add information or request review, not merely check whether the request arrived.
Build it yourself: explore the technical approachNeed to publish data or let others submit it? Endpoint Composer exposes a configured Service Automation Suite data object with selected methods and security profiles. Other building blocks handle subsequent processing.
From product to workflow
HelloID in your workflow
Pull up a chair. Or join us online.
Over coffee, tea or online: tell us what you are working on.
We can help with the integrations, automation and coordination your process needs, even if your application is not listed yet.
