Integrations · HRMS Providers
Microsoft Entra ID
ProofTrail connects to Microsoft Entra ID through its API, as employees management, access review. Each sync feeds the checks below, and a failing check opens a task for its owner.
Staff Data
Keep the staff list, managers, start and end dates in sync with the system of record. Synced every 24 hours.
- Reporting manager should be assigned
- Date of joining for new staff should be provided
- Staff role should be assigned
- Access should be removed for offboarded user
Access Control Data
Sync user accounts to ensure access is granted only to authorized personnel. Synced every 24 hours.
- Rules for who can access critical systems should be configured
- User access to critical system should be valid
- User should be identified
- User should have MFA enabled
- MFA should be enforced on critical system
- Periodic review of access to critical systems should be completed
- Access should be removed for offboarded user
- User should be identified (for access systems outside the audit scope)
- User access to critical system should be valid (for access systems outside the audit scope)
- User should have MFA enabled (for access systems outside the audit scope)
- MFA should be enforced on critical system (for access systems outside the audit scope)
- Access should be removed for offboarded user (for access systems outside the audit scope)