Appearance
Answers to common questions about setting up and running imper.ai for Enrollment.
Getting Started
What is imper.ai for Enrollment?
imper.ai for Enrollment securely onboards new employees - verifying their identity and delivering their corporate credentials before their first day, without manual handoffs between HR and IT.
Which systems do I need to connect?
An identity provider (Microsoft Entra, Google Workspace, or Active Directory) so imper.ai can apply credentials and verify new hires.
A source of new hire records (an HR system, an IGA system, or an automated report).
See Getting Started with imper.ai for Enrollment.
How does imper.ai know about new hires?
imper.ai detects new hires in one of two ways:
A direct integration with your HR system (such as Workday or UKG) or identity governance (IGA) system (such as SailPoint).
An automated report your team sends to imper.ai with each new hire's work email, personal email, and start date.
The Enrollment Flow
How does enrollment work?
When a new hire is detected, imper.ai sends them a secure enrollment link on their start date. The new hire verifies their identity, sets their corporate password, and is ready to access corporate systems on day one. See the Overview for the full flow.
When is the enrollment link sent?
imper.ai schedules the enrollment link to be sent to the new hire's personal email on their start date. On the morning of their first day, they receive the email and can complete enrollment on their own.
What happens if identity verification fails?
If verification does not pass, the employee cannot continue to set their password and the enrollment is not completed. The unsuccessful attempt is recorded so HR and security teams can review it on the Enrollments page and the Dashboard, and follow up if a malicious attempt is suspected.
How are credentials delivered securely?
Rather than sending credentials through email, text message, or the help desk, imper.ai delivers and activates the new hire's corporate password through a secure channel that is only accessible to the verified employee.
Links, Tracking & Administration
How long is an enrollment link valid?
Enrollment links expire after a configured time window. Once a link expires, it is no longer valid and a new enrollment link must be sent. See Enrollment Settings.
Can an enrollment link be resent?
Yes. A daily enrollment send limit caps how many times a link can be sent to a single new hire per day, preventing accidental or abusive repeated sends while still allowing for legitimate resends.
Where can I track enrollment progress?
HR and security teams review enrollment progress and verification results on the Enrollments page, and monitor activity on the Dashboard.
What can the HR role do?
HR can review new hire enrollment progress and verification results, and send enrollment links. HR cannot change settings or manage other users. See User Management.
What permissions does imper.ai need in my identity provider?
imper.ai uses your identity provider in two ways during enrollment - reading identity data to fetch and identify new hires, and writing to set their corporate password - so the connection requires both read and write permissions. See Microsoft Entra Permissions.