Revolutionizing IT onboarding: A zero-touch approach

The vision: creating a seamless onboarding experience

We envisioned a process where new employees could simply open their laptops and be up and running in minutes, with automatic access to all the necessary tools. This meant automating every step of the onboarding journey, from hardware to software.

Provisioning access via Okta

We implemented Okta as our Single Sign-On (SSO) system, and integrated all of our SAAS and in-house applications to work with Okta. We then connected our HRIS system (BambooHR) to Okta's source of truth. To enable seamless application access, we configured groups based on teams and assigned access to applications based on these groups. When a new employee joins a particular team based on Bamboo attributes, they would be auto-added to the corresponding Okta groups, automatically assigning the applications the team needs.

Synchronizing Okta and laptop accounts

Using Jamf Connect, we synchronize Okta accounts and laptops. As a result, every Sendbirdian can use their Okta account to log into their corporate laptops.

Laptop deployment via ABM and Jamf

We've configured Apple Business Manager to automatically enroll new devices ordered through the Apple enterprise store into Jamf Pro's DEP program. New employees' laptops are auto-enrolled into this process.

By integrating Jamf Pro's Enrollment Customization with Okta SSO, new hires who power on their device and connect to a network are automatically directed to an Okta login screen. After entering their temporary credentials and completing the password reset and Okta Verify (MFA) setup, they can successfully log in.

Once a new hire successfully logs into Okta, the device automatically downloads and applies preconfigured profiles from Jamf Pro's Prestage Enrollment, ensuring all necessary security requirements without additional user input.

Installing apps via Jamf Setup Manager

Jamf Setup Manager automates the installation of essential software such as 1Password and Google Chrome, ensuring automatic compliance with our security policies. This adds a nice touch, as the user can log in and see all applications installed for them rather than installing one at a time, which is not the most fun thing to do on their first day.

Tying loose ends with Okta workflows

We utilized Okta workflows to build automation and tie everything together, creating a seamless process for onboarding employees. Two crucial automation we built:

• Automated onboarding ticket creation: As soon as a new hire joins, we generate a ticket automatically. This serves as valuable compliance evidence and helps track each individual's onboarding progress.

• Automated onboarding email: On their first day, new hires receive a personalized email to their personal email address. This email contains temporary credentials and clear setup instructions, allowing them to hit the ground running.

By automating these essential onboarding steps, we're saving time and ensuring that every new employee receives consistent and timely information. It's a win-win for both compliance and the employee experience.

The result: a magical 30-minute onboarding experience

A new employee joins the Sendbird flock. They receive a new laptop (delivered to their door or waiting at the office) and an email containing temporary login credentials and simple instructions. They power up their laptop, enter their credentials, and complete the Okta verification. Within a few clicks, the magic happens: the computer enrolls into our Jamf Pro (MDM), essential tools like Chrome and Slack appear, and their Okta account includes all the necessary apps. In less than 30 minutes the new Sendbirdian is ready to contribute.