Building Automations with Deel IT Access Management (IAM) – Deel

With Deel’s Automation Builder, you can connect HR events directly to your Identity and Access Management (IAM) feature. This eliminates manual steps, reduces errors, and ensures that critical security actions, such as granting or revoking access, happen instantly when employee changes occur.

For example, when an employee’s contract is terminated in Deel, the workflow can automatically trigger an Access Management action such as removing SSO access, disabling specific apps, or enforcing a password reset.

This article explains how to build and manage workflow automations on Deel IT.

Before you begin

To use Access Management (IAM) actions within Automation Builder, you’ll need:

A user with org admin permissions (or a custom role with automation management permissions)
An active Deel IT Access Management (IAM) subscription
A connected JumpCloud account with Identity Enhanced activated

If the Automation option is missing from your More menu on Deel, contact your Deel administrator to request access.

Step 1. Create an HR automation workflow with IAM sections

You can create automated workflows that connect HR events in Deel with your IT Access Management (IAM) actions.

To create an HR automation workflow with IAM actions:

From the Deel home page, go to More > Automation.
On the Automation page, click New workflow.
Choose a template from the gallery or select Start from scratch.

You can find a template for Revoke application access on worker termination, for example. This will protect company data by instantly suspending a worker’s app access when their contract ends, preventing unauthorised use.

On the workflow page, add a trigger to start the workflow, such as an onboarding, people data update, or offboarding event.
Add an action to define what happens after the trigger. If you have Access Management (IAM) enabled, select Application access and authorization and choose one or more of the following actions:

Action	Description
Change access status	Sets the user’s account to Active or Inactive.
Force password change	Immediately invalidates the user’s password and sends a reset link by email.
Reset password	Sends a password reset email to the user.

You can add multiple IAM actions in the same workflow. Actions run in the order you add them, so make sure to place critical ones (like disabling access) first.

(Optional) Add or remove users from Access Groups to manage their access to specific applications in your Access Management instance.

Adding branches lets you apply different IAM actions for specific employee groups (e.g., departments, regions, or contract types). This step is optional but useful for large organizations.

(Optional) Add branches to create conditional paths based on attributes such as department, country, or contract type. This allows you to apply different IAM actions for different employee segments.
Click Continue, name your workflow, optionally add a description and notification email, then select Publish & Activate.

Automations only trigger for future HR events that meet your defined conditions

Once published, the automation will automatically trigger your configured IAM actions whenever the selected HR event occurs.

Step 2. Edit existing workflows

To make changes to an existing workflow:

Go to More > Automation, and navigate to the Workflows tab.
Click the ellipsis (three dots) menu next to the workflow you want to edit to open the Workflow Canvas Editor.
Make your changes and click Save.
Use the ellipsis menu to manage a workflow's status.

Deactivated workflows remain saved and can be reactivated later if needed.

Frequently Asked Questions

[ACCORDION] I can’t see the Automation feature under the “More” menu. What should I do?

Check your role permissions or contact your Deel administrator to enable access.

[ACCORDION] The Automation page doesn’t load, or the button isn’t responding. How can I fix this?

Try refreshing your browser, clearing cache, or checking your internet connection.
If the issue persists, contact Deel Support for assistance.

[ACCORDION] Can I combine Access Management actions with other workflow actions?

Yes. You can pair IAM actions with others, such as MDM actions (if you have the MDM add-on), to manage both device and application access during HR events like onboarding, offboarding, or role changes.
You can also include notification actions (Slack, email, etc.) to alert administrators or affected users when workflows run.

[ACCORDION] How are actions executed in a workflow?

Actions run in the order they appear in the workflow builder.
Ensure the sequence matches your intended logic, for example, disabling access before sending a notification.

[ACCORDION] The automation didn’t run. How can I troubleshoot it?

Automations do not re-run automatically.
Go to the History tab to view logs for all automations.
You can inspect detailed error messages and identify potential configuration issues or conflicts.

In this article