Applicable Product:
- Talent Management: Performance
Applicable Release:
- ALL
Summary:
This article outlines the process for granting temporary system access to summer students/contractors who are not included in the standard user data feeds. It also covers considerations for Single Sign-On (SSO) access and manual account setup.
Use Case
A customer requested access for a summer student who will be assisting with compensation-related tasks. The student is not part of the regular employee data feeds and will only be with the organization temporarily.
Key Considerations
- The student is not included in the standard user feed due to the temporary nature of the role.
- The student requires access similar to internal users but should be easily removable once the term ends.
- The account must support SSO login via the organization’s Identity Provider (IdP).
Solution
Option 1: Include in Standard Feeds
If the student’s role is similar to that of regular employees:
- Add the student to the standard User, Employee (EEH), and Employment (ESH) feeds.
- Deactivate the account through the same feeds when the term ends.
Option 2: Manual Account Creation
If the student should not be included in the standard feeds:
- Manually create the Employee, User, Job Code, and Position records.
- Coordinate with internal IT to ensure the student has an active record in the organization’s Identity Provider (IdP) (e.g., ADFS) to support SSO.
Required Information for Manual Setup
To create the account manually, provide the following:
- Business email
- Job code and title
- Manager
- Any additional roles beyond the default Employee role
SSO Configuration
- Confirm with IT that the student has an active record in the IdP.
- If login issues occur, capture a screenshot of the error and escalate for troubleshooting.
Follow-Up
Once the account is created:
- Verify the user appears in the system.
- Test SSO login.