.svg)
Workforce events happen in UKG first. But without a direct governance layer, the identity changes that should follow are manual, delayed, and dependent on IT follow-up that is impossible to verify at scale.
An employee activated in UKG does not automatically create an IdP account or provision application access. IT waits for notification. The new employee waits for access. Every day of delay is a productivity loss and a governance gap.
When an employee changes position or department in UKG, prior entitlements are rarely removed. Access from every previous role accumulates, creating privilege creep that goes undetected until an audit surfaces it.
A termination processed in UKG closes the workforce record. But access in your IdP, SaaS applications, and on-prem systems frequently remains active. Offboarding looks complete in UKG. The access is still live downstream.
BalkanID connects to UKG Pro and UKG Ready via webhook or scheduled sync and handles every Joiner, Mover, and Leaver event automatically, provisioning and deprovisioning across your IdP and every connected application.
Automated Joiner provisioning on day one
Peer-analysis birthright access, no guesswork
Atomic Mover updates, grant and revoke in one operation
Immediate Leaver deprovisioning and account suspension and verification of deprovisioning of access
Each JML event type is triggered by a UKG workforce event delivered via webhook or scheduled sync. Fully customisable to your organization's provisioning policies and approval workflows.
Connect UKG and IdP to BalkanID Playbooks via webhook or scheduled sync
Define provisioning policies, approval routing, and birthright access rules
Every JML event triggers the right playbook automatically, no manual steps
Full audit trail, approval records, and policy evidence, always ready
BalkanID gives your team a live, continuously governed identity lifecycle, not a monthly report that is stale before it lands.
Right access on day one. Removed the same day they leave.
Peer analysis ensures no over-provisioning. RBAC and ABAC policies enforced automatically.
Centralized, immutable audit logs. Compliance reviews become a report export, not a fire drill.
Three things that make BalkanID JML different from the ITSM tickets and spreadsheets you already rely on.
Every JML event triggers an automated playbook the moment it occurs in UKG, not when someone opens a ticket or remembers to act.
Birthright access is determined by analysing real colleagues with the same role, department, manager, and employment type, not from a static template someone built years ago.
Every execution, approval, grant, and revocation is logged in a centralized, immutable audit trail. RBAC, least privilege, alerts, and dashboards, included, not bolted on.
Connect UKG to BalkanID and have your first JML Playbook live in hours. Zero manual provisioning. Full audit trail from day one.
