Step 3: Configure Action Variables and Onboarding Actions

Onboarding tutorial · Step 3 of 5

Use data from the onboarding lookup filter to target the user’s account, set the password, enable the account, and record the completed event.

How actions work

When a user submits a form with Execute selected, NIM runs the onboarding actions from top to bottom. Actions can update any configured target system. This example updates an Active Directory user after successful verification.

Set action variables

Action variables make values returned by the Question-answer filter available to forms, notifications, and onboarding actions.

1. Open the onboarding profile and select the Action Variables tab.

2. Review the columns returned by the Onboarding_Employee_Lookup filter created in step 1.

3. Select the play button next to each field you need. NIM generates and assigns a variable for the selected field.

For Active Directory, create variables for at least these fields:

Filter field	Why it is needed
objectGUID	Targets the correct account for the final update.
sAMAccountName	Supports audit messages and notifications.
displayName	Supports readable audit messages and notifications.

Missing a required field?

If a needed field is not available, update the Onboarding_Employee_Lookup filter to return it, then return to this tab and create the variable.

4. Save the profile.

Configure an onboarding action

1. In the onboarding profile, select the Onboarding Actions tab.

2. Select + Add, then select the new action.

3. Enter a description. For example:

   {voDisplayName} ({voSAMAccountName}) has completed onboarding.

   If you used different action-variable names, update the placeholders to match them.

4. Select the Active Directory system under System.

5. Select UserUpdate under Function.

6. On the Input tab, configure these attributes:

   Attribute	Value source	Value
   objectGuid	Variable	voObjectGUID
   accountPassword	Variable	voPassword
   ChangePasswordAtLogon	Constant	false
   Enabled	Constant	true

7. Save the action.

Test with a safe account

This action changes a target account’s password and can enable the account. Use a dedicated test account until the complete onboarding flow has been validated.

Next: notify usersContinue to step 4: Configure End-User Notifications.