With Deel’s Automation Builder, you can connect HR events directly to your Identity and Access Management (IAM) feature. This eliminates manual steps, reduces errors, and ensures that critical security actions, such as granting or revoking access, happen instantly when employee changes occur.
For example, when an employee’s contract is terminated in Deel, the workflow can automatically trigger an Access Management action such as removing SSO access, disabling specific apps, or enforcing a password reset.
This article explains how to build and manage workflow automations on Deel IT.
In this article
- Before you begin
- Step 1. Create an HR automation workflow with IAM sections
- Step 2. Edit existing workflows
- Frequently asked questions (FAQs)
Before you begin
To use Access Management (IAM) actions within Automation Builder, you’ll need:
A user with org admin permissions (or a custom role with automation management permissions)
An active Deel IT Access Management (IAM) subscription
A connected JumpCloud account with Identity Enhanced activated
If the Automation option is missing from your More menu on Deel, contact your Deel administrator to request access.
Step 1. Create an HR automation workflow with IAM sections
You can create automated workflows that connect HR events in Deel with your IT Access Management (IAM) actions.
To create an HR automation workflow with IAM actions:
-
From the Deel home page, go to More > Automation.
-
On the Automation page, click New workflow.
-
Choose a template from the gallery or select Start from scratch.
-
On the workflow page, add a trigger to start the workflow, such as an onboarding, people data update, or offboarding event.
-
Add an action to define what happens after the trigger. If you have Access Management (IAM) enabled, select Application access and authorization and choose one or more of the following actions:
-
(Optional) Add or remove users from Access Groups to manage their access to specific applications in your Access Management instance.
-
(Optional) Add branches to create conditional paths based on attributes such as department, country, or contract type. This allows you to apply different IAM actions for different employee segments.
-
Click Continue, name your workflow, optionally add a description and notification email, then select Publish & Activate.
| Action | Description |
|---|---|
| Change access status | Sets the user’s account to Active or Inactive. |
| Force password change | Immediately invalidates the user’s password and sends a reset link by email. |
| Reset password | Sends a password reset email to the user. |
Once published, the automation will automatically trigger your configured IAM actions whenever the selected HR event occurs.
Step 2. Edit existing workflows
To make changes to an existing workflow:
Go to More > Automation, and navigate to the Workflows tab.
Click the ellipsis (three dots) menu next to the workflow you want to edit to open the Workflow Canvas Editor.
Make your changes and click Save.
Use the ellipsis menu to manage a workflow's status.
Deactivated workflows remain saved and can be reactivated later if needed.
Frequently Asked Questions
[ACCORDION] I can’t see the Automation feature under the “More” menu. What should I do?
Check your role permissions or contact your Deel administrator to enable access.
[ACCORDION] The Automation page doesn’t load, or the button isn’t responding. How can I fix this?
Try refreshing your browser, clearing cache, or checking your internet connection.
If the issue persists, contact Deel Support for assistance.
[ACCORDION] Can I combine Access Management actions with other workflow actions?
Yes. You can pair IAM actions with others, such as MDM actions (if you have the MDM add-on), to manage both device and application access during HR events like onboarding, offboarding, or role changes.
You can also include notification actions (Slack, email, etc.) to alert administrators or affected users when workflows run.
[ACCORDION] How are actions executed in a workflow?
Actions run in the order they appear in the workflow builder.
Ensure the sequence matches your intended logic, for example, disabling access before sending a notification.
[ACCORDION] The automation didn’t run. How can I troubleshoot it?
Automations do not re-run automatically.
Go to the History tab to view logs for all automations.
You can inspect detailed error messages and identify potential configuration issues or conflicts.