Skip to main content
Version: Angophra

Workforce Reports

Menu path: Observe → Deep Dive → Workforce
URL: /en/insights/dashboard/identity/workforce

Purpose​

The Workforce Reports page is your window into the people records that drive identity creation across your organisation. It surfaces data from your connected HR or workforce management feeds, showing how many people records exist, how they are distributed, where there are duplicate or conflicting data values, and - critically - how many workforce persons do not yet have a linked identity in the system.

This is the starting point of the identity lifecycle. Every account in every directory should ultimately trace back to a person record here. Where that chain is broken, you have an orphaned account problem. Where person records exist but no identity has been created, you have an unprovisioned employee - potentially someone who cannot do their job, or someone who has been provisioned outside your standard processes.

Charts and Reports​

Workforce Persons By Feed (Donut Chart)​

Chart type: add example --> Donut chart
What it shows: The total number of workforce person records, broken down by the feed (HR system) they came from.

In the example environment, 9,156 total persons are shown: 9,135 from ModernIAM HR Feed and 21 from Provisioning Test. This breakdown tells you which HR systems are authoritative and how many people each system contributes.

Why it matters: If you have multiple HR feeds, this chart confirms that all feeds are contributing records as expected. A sudden drop in records from one feed may indicate a sync failure or a data export problem at the HR system end. Discrepancies between feeds (e.g., the same person appearing in two feeds) can lead to duplicate identity creation.

Workforce Persons By Feed (Bar Chart - Duplicates)​

Chart type: add example --> Horizontal bar chart
What it shows: The count of duplicate values across key person attributes within each workforce feed - specifically Employee ID, Employee Number, Username, Email, and Mobile.

In the example, the chart shows: Employee ID: 4 duplicates, Employee Number: 1 duplicate, Username: 2 duplicates, Email: 2 duplicates, Mobile: 5 duplicates.

Why it matters: Duplicate values on joining keys like Employee ID are particularly serious. They mean two different person records in the HR feed share the same identifier, which can cause Apporetum to be unable to determine which record is authoritative when linking to directory accounts. Duplicate email addresses and usernames can cause authentication conflicts and are a sign of data quality issues in the source HR system that need to be fixed at source.

What to do: Investigate each duplicate category. Work with your HR system administrator to clean up the duplicate values. Until resolved, the affected accounts may not be correctly linked to the right person, which breaks the joiner/leaver lifecycle.

Workforces Persons Without Identities​

Chart type: add example --> KPI counter with drill-down link
What it shows: The number of workforce person records that do not have a corresponding identity record in Apporetum.

In the example environment this shows 9,156 - which is the entire workforce population. This is expected in an environment where identity creation may be newly configured or where identities are managed through a different process. In a mature environment, this number should be very low (ideally zero for active employees).

Why it matters: A workforce person without an identity means Apporetum cannot link that person's HR record to their directory accounts. This breaks the automatic joiner/leaver controls - if the HR system marks someone as terminated, but there is no identity to act on, the offboarding process cannot proceed automatically.

What to investigate: Click "View" to see the list of unlinked persons. Prioritise: (1) any persons who are marked as active in HR but have no identity - they may have accounts in directories that are ungoverned; (2) any persons who were recently onboarded and should have been provisioned but are not yet linked.

Persons by Employee Type​

Chart type: add example --> Donut chart
What it shows: The breakdown of workforce persons by their employment type (e.g., full-time employee, contractor, casual, etc.).

Why it matters: Employment type drives access policies in many organisations - contractors typically have shorter account lifetimes and more restricted access than permanent employees. Understanding the mix of employee types helps you assess whether your access policies are correctly calibrated and whether the right lifecycle controls are applied to each group.

The Workforce Records Table​

Below the charts is a searchable, filterable table of all workforce person records. Columns include:

  • Display Name - The person's name as sourced from the HR feed
  • Workforce Feed - Which HR system this record came from
  • Identity - The linked Apporetum identity (if one exists)
  • Last Sync Change - When this record was last updated from the HR feed

The table can be filtered to show only records without a linked identity (using the "Linked Identity" toggle), making it easy to identify and investigate unlinked persons.

How to use the table effectively​

Use the search and filters to identify the "ugly" cases: active employees without identities, or persons whose last sync change is very old (suggesting their HR record is not being updated). These are the records that need immediate investigation to maintain the integrity of your identity lifecycle.