Active Directory to Viewpoint Vista - A Blueprint for Clean Employee Data

Why would you want to automate data from Active Directory to Viewpoint Vista?

There are many simple answers: it reduces your team's manual workload so they can focus on more valuable tasks, data quality improves, there are fewer mistakes, and it reduces the time it takes to onboard or offboard an employee. These are all true, but it's worth looking at your strategy for user lifecycle automation more generally.

The business tasks that surround joiners / movers / leavers (JML) are critical events in an employee's journey with your organization. You'll want to:

• identify systems of record - so you know your source of truth
• clarify responsibilities - who performs what task? Identify a single owner per task.
• automate data flow - but make it auditable so you can keep a human in the loop for exceptional cases
• define business rules - so expectations are aligned

We'll help you map out these processes and find the opportunities to integrate systems more effectively. To see what this looks like at a construction company, read our BECI Construction case study.

What data should sync from Active Directory to Viewpoint Vista?

The specific details will depend on your business processes. Usually, your Viewpoint Vista (a construction enterprise resource planning system, or ERP) is the system of record for accounting, job cost, and HR/payroll data across your projects. Active Directory is the system of record for your employee's digital identity in your organization.

That means you'll want Viewpoint Vista employee records to stay consistent with your directory. Work email, name, and employment status flow from Active Directory to Vista, meaning the records your payroll and accounting teams rely on will have perfectly consistent account details. No more typos or mismatches!

Active Directory is the system of record for key digital identity data:

• Username (sAMAccountName) and email address (userPrincipalName)
• Mailbox (typically Exchange)
• Group memberships
• Device and system access
• Last logon history

Once you've automated Active Directory to Viewpoint Vista, employee records stay in sync with the directory - and when someone is offboarded, their access gets cleaned up instead of lingering - creating a reliable automated user provisioning workflow.

What this is not?

We provide fully managed done-for-you data integration as a service. We offer data integrations fit to your exact business needs through a service delivery model. That means you're not buying an expensive custom one-time project that you'll have to manage and maintain, becoming an ongoing headache for you.

Instead, we take responsibility for syncing data between your systems in a way that works for you. We monitor and respond to data sync issues, keep you in the loop, and maintain the integration over time.

Just make the problem go away

If you're struggling with inconsistent processes and account management headaches, schedule some time with us. We can help you sort through:

• HR vs IT process
• Onboarding and offboarding
• Groups & licenses
• Device management

What about getting everyone on the same page in HR and IT? What's the project plan look like?

Getting the left hand to know what the right hand is doing in business is complicated. At AutoIDM, we have established a proven process to make sure everyone in your business is on the same page. The Active Directory to Viewpoint Vista integration (and our general integration process) is adjusted depending on your needs, but it follows these main points.

1. Initial Meeting - (30 min) Bring all stakeholders together to align on the timeline, expectations, and responsibilities.
2. Access - (30 min) Architect a secure solution that gives AutoIDM access to what we need while keeping your IT team in control.
3. Business Rules - (1 hour) Align Active Directory with Viewpoint Vista, build the rule set, and define the testing plan.
4. Testing - (~2 hours) Iterate with your champion to validate the integration and resolve issues quickly.
5. Deployment - Final deploy and full support for any adjustments or changes. Active Directory to Viewpoint Vista is now up and running.

Pull data from Active Directory: A simple approach is PowerShell. Review the ActiveDirectory module documentation, specifically Get-ADUser. Once you have data from Active Directory, you need to get it into Viewpoint Vista.

Match up accounts: Once you've got employee data from Active Directory, you'll need to match it up to Viewpoint Vista employee records. This can be done by tracking an external ID or fuzzy matching on name or email address.

Map data and push to Viewpoint Vista: Your options depend on how Vista is deployed. Trimble Construction One cloud-hosted Vista customers are eligible to purchase the Vista API, a bidirectional REST API - review the Vista API developer documentation and Trimble's Vista API documentation resources. For on-premises Vista environments, reach out to Viewpoint support about the integration options available for your deployment. Either way, you'll need to figure out record lifecycles: what happens when employees join, leave, change names, etc.

Operationalize: After you've got the logic figured out, you'll want to set up monitoring to catch errors, alerting to let your team know when something requires their time, and training for the technicians who will be responsible. You'll also want to educate your HR and business teams about what to expect and how to get support.