Why New Users with Future Start Dates Are Created in a Disabled State

When a new user account is created in Identity Panel with a future start date, the system automatically places the user in a disabled state. This behavior is intentional and supports secure, policy-aligned identity lifecycle management.

Understanding the Lifecycle Logic

Identity Panel follows the "Joiner-Mover-Leaver" (JML) identity lifecycle model. A “Joiner” is typically a new hire who is scheduled to start work in the future. To prevent premature access to systems, Identity Panel will create their account record but mark it as disabled until the start date arrives.

This ensures:

• The user is visible and traceable within identity systems

• Access is not granted before the official employment start

• Downstream systems can prepare entitlements in advance without activating them

How It Works

• When a user is ingested from a source system (such as an HR platform) and their start date is in the future, their identity is created in a disabled state.

• HyperSync Panel and other provisioning components can still prepare roles, groups, or resources, but access will not be granted until the start date.

• Once the start date arrives, Identity Panel will automatically update the user’s status to enabled, initiating access provisioning workflows.

This behavior can be aligned with event triggers, attribute rules, and time-based policies to ensure precision and compliance in identity management.

Benefits for Your Organization

• Improved Security: Prevents unauthorized early access

• Operational Readiness: Enables IT and HR teams to prepare access in advance

• Policy Alignment: Supports compliance with joiner policies and onboarding procedures

This design minimizes risk while ensuring new users are ready to work the moment they are authorized to do so.