Getting started with third-party user provisioning – Deel

Some Deel products — such as Deel IT, Deel Engage, and Deel HRIS — can be used without an active contract. To manage workers' access to these products, you can automatically create and update user accounts in Deel by syncing their data from your third-party system.

This process is known as third-party user provisioning. In Deel, the user accounts created this way are technically called Persons Without a Contract (PWACs). PWACs are designed for non-payroll use cases only and cannot be used with Deel’s Contractor, EOR, or Payroll products.

This article explains how third-party user provisioning works in Deel.

How PWACs work

PWAC information flows one way from your external system into Deel.

Whenever your HRIS, identity provider, or supported external system sends user data into Deel:

If the user does not yet have a contract in Deel, a PWAC profile is automatically created for them
They get access to non-payroll products such as Deel IT, Deel Engage, and Deel HRIS, depending on the Deel products your organization has activated
As more information becomes available in your system, it will continue syncing into Deel, and if a contract is later created, the same profile is updated to reflect their new status

Automatic deduplication

When worker data is imported into Deel from external systems, there’s a risk of creating duplicate profiles if the same person exists in both systems.

To prevent this, Deel applies automatic deduplication.

The system checks for matches on personal or work email.
If a match is found, Deel links the external worker ID to the existing Deel profile, and future updates are applied to that profile.
For workers with KYC-approved accounts, Deel does not overwrite legal names.
Work info (such as title and seniority) is only updated for Direct Employees and PWACs.
All other supported fields continue to sync as normal.

Deduplication only prevents exact duplicates. If payroll workers are included in provisioning, their profiles may be unintentionally updated with data from the external system. To avoid issues, always filter out payroll worker types and provision only non-payroll users.

Worker profile creation and linking for HRIS integrations

When a new user record in your HRIS, such as Workday, BambooHR, or HiBob, passes the integration filter criteria, Deel automatically attempts to sync it and either create or link a worker profile.

If the work or personal email matches an existing profile in Deel, a new one is not created. Deel links the existing profile to the HRIS record using the external provider ID, such as the Workday employee ID
If there is no email match, Deel creates a new worker profile and links it automatically to the HRIS record via the external ID
Once the record is linked, any future updates in your HRIS, such as name or email address changes, are automatically reflected in Deel

This process applies only to HRIS integrations that sync worker information.
For identity provider (SSO) integrations such as Okta or Entra ID, Deel manages user access but does not create or update worker profiles.

Supported third-party integrations

You can automatically provision non-payroll users into Deel through the integrations listed in the tables below. Each integration also includes a link to documentation with specific setup instructions for each third-party system.

Native integrations

Integration	Documentation link
SAP SuccessFactors	SAP SuccessFactors documentation
Personio	Personio documentation
BambooHR	BambooHR documentation
HiBob	HiBob documentation (permissions needed)
Okta	Okta documentation

Merge.dev integrations

Integration	Documentation link
Charlie	How-to guide
Dayforce	How-to guide
Google Workspace	How-to guide
Gusto	How-to guide
Humans	How-to guide
JumpCloud	How-to guide
Justworks	How-to guide
Keka	How-to guide
Microsoft Entra ID	How-to guide
Paycor	How-to guide
Sage HR	How-to guide
Workday	How-to guide
Zoho People	How-to guide

If your third-party integration is not listed above, you can make a request through your Deel IT representative. Following this, we will conduct a quality assessment with Merge.dev to evaluate whether to start supporting the new integration.

PWACs integration reference

This section provides information about the capabilities and limitations of the integration. You can use it to understand whether the integration can sync the data you need to sync.

Supported products

The Person Profiles integration supports the following product types:

Deel IT
Deel Engage
Deel HRIS

Supported fields

The Person Profiles integration supports the sync of the following mapping fields:

Deel field	Required?
First name	Yes
Last name	Yes
Personal email	Yes
City	Yes
State	Yes
Address	Yes
Country	Yes
Zip code	Yes
Work email	Yes
Mobile phone	Yes
Hire date	No
Job title	Yes
Nationality	No
Manager details	Yes
Work location	Yes
Employment status	Yes
End date	Yes

In this article