Epic Systems (Epic EHR) to Active Directory (AD), Entra ID (Azure AD)

Microsoft with Aquera: Identity Lifecycle Management at Scale:

✅ Microsoft recognizes Aquera for HR-driven identity sync between Entra ID (Azure AD) and HCM, embedding identity context throughout the employee lifecycle to reduce risk.
✅ Gartner Designates Aquera "Cool Vendor" (2022) in Identity-First Security; and Specialists (2024) in “Identity data integration" and "SCIM gateway".

Bi-directional Automated Sync: Cloud, On-Prem, Hybrid:

The Aquera Epic Systems (Epic EHR) Sync Bridge to AD and Entra ID synchronizes visitor user accounts (such as patients) bidirectionally in Epic Systems to Active Directory (AD) on-prem, AD/Entra ID hybrid, and pure Entra ID cloud. When only AD is used, the Aquera Sync Bridge syncs users directly from HR systems or AD directories into Epic. Additionally, for Entra ID Identity Governance and Administration (IGA), the Aquera Sync Bridge retrieves user entitlements from Epic and imports to Entra ID. For other downstream apps, Aquera SCIM Gateway for Entra ID synchronizes user data for consistent and unified identity throughout your HR and IT ecosystem.
✅ See also Aquera Identity and Governance Sync on Epic Systems Connection Hub.
✅ See Microsoft API-driven Inbound Provisioning and HR-to-Target App provisioning.

Key Benefits:

✅ Enable Day One Productivity: Automatically sync visitors from Epic to initiate onboarding to AD and Entra ID before visit date for screening compliance, access to apps and equipment.
✅ Sync User Data in Real-Time: Automatically sync updates in Epic to AD/Entra ID.
✅ Automated Identity Sync for Joiners, Movers, and Leavers: Sync HR updates with AD/Entra ID to provision and de-provision Epic users and groups.
✅ Mitigate Security Gaps: On user exits, automatically de-provision Epic accounts and revoke access.
✅ Configure Data Syncs, Custom Fields: Configure granular data sync between Epic and AD, Entra ID, including custom fields.
✅ Auto-Correlate Records: Clean mismatches.

Key Features:

✅ Hybrid; Separate Sync: Frontline to Entra ID; others to On-Prem AD or both.
✅ Multiple-Identity Sourcing: Multi-source HR syncs to 1 or more AD, Entra domains, forests.
✅ Bi-directional Sync: ATS and HCM worker sync with AD/Entra ID.
✅ Unique Matching: Name conflict resolution to distinctly identify and consolidate user identity.
✅ Critical Attributes: Sync Principal Name (UPN), Distinguished Name (DN), SAM Account Name.
✅ Custom Attributes: Sync any extended attributes for your HR process.
✅ Attribute Write-back email addresses, phone numbers, … to ATS/HCM.
✅ Attribute Import from any application.
✅ Groups: Security Groups, 365 Groups, Distribution Groups (email distribution lists) to control access in AD/Entra ID.
✅ Microsoft 365 License Management, shared mailbox creation, picture (photo) sync.
✅ Multi-directory, Multi-region user sync for local, regional, and global regulatory compliance.
✅ Organizational Units: Organizational Unit (OU) lookup and assignment based on ATS/HCM attributes.
✅ Access Rights: Direct, Group, Rule-based, and External authority assignment.
✅ Global Address List to enhance collaboration.
✅ Password Delivery efficiency, SSPR.
✅ Hierarchy Generation: Auto-generation of management hierarchy in AD/Entra ID.