How RRCU Uses ConductorOne Automations to Streamline Identity Operations
Claire McKenna, Director of Content & Customer Marketing
Share
Content
Stay in touch
The best way to keep up with identity security tips, guides, and industry best practices.
Automations are one of the most powerful parts of ConductorOne, turning identity governance from manual tasks into workflows that run continuously in the background. With simple if/then logic and real-time data from your identity provider, HR system, and apps, IT and security teams can trigger onboarding, role changes, reviews, and notifications automatically, no code required.
At Red River Credit Union (RRCU), Identity & Access Management Specialist Anthony Stewart and Information Security Officer Brandon Baker quickly made Automations a core part of how they run identity operations. Soon after ConductorOne launched Automations, they were building workflows across onboarding, offboarding, transfers, access reviews, and even platform migrations, reducing manual effort while creating a more seamless experience for both IT and end users.
Here’s how RRCU puts Automations into practice.
Onboarding and offboarding without the bottleneck
Before Automations, onboarding and offboarding at RRCU was a time-intensive, manual process. Anthony, who manages identity operations, described the old way: “I was spending a lot of time on a single revoke list, and now I can just push the button and move on to something else. It’s a lifesaver.”
Today, when a new user is added to Active Directory, an automation kicks off based on job title. The right groups, access rights, and permissions are assigned automatically. Offboarding follows the same logic in reverse. What used to take 20 to 30 minutes per user now happens in seconds.
“This saves me time to move on to something else,” Anthony said.
A safety net for the things you forget
One of RRCU’s smartest implementations is using Automations as a built-in quality check. Anthony has workflows configured for base roles so that if a required entitlement gets missed during manual onboarding, an automation catches it and fills in the gap automatically.
“I have automations set for base roles. If I don’t get to it or I forget, it fills it in for me, anything that’s missing.”
The same logic applies to security groups. Certain roles, like tellers or branch managers, require specific group memberships for security reasons. Rather than tracking those manually, Anthony built automations that handle it whenever access is requested. Nothing falls through the cracks, and new employees aren’t stuck waiting a week to discover they’re missing something critical.
Automated notifications that improve the end-user experience
RRCU also uses Automations to keep people informed. When a new employee is set up in ConductorOne, automated emails go out to the relevant departments letting them know the employee is ready for access requests.
For certain account types, when a user is granted access to a new application, they receive an email explaining how to set it up. No tickets. No back-and-forth. The user gets what they need, right when they need it.
Access reviews triggered by real-world changes
Employee transfers are a governance blind spot for a lot of organizations. When someone changes branches or job titles, their old access can linger unchecked. RRCU solved this by building automations that trigger an access review the moment a transfer occurs.
Anthony created an automation that kicks off anytime an employee undergoes a job title or branch change. The automation lets their manager know what access the person currently has and prompts the manager to revoke any unnecessary access.
Instead of waiting for a scheduled review cycle, access is evaluated in real time, right when it matters most.
Powering a platform migration
When RRCU migrated from one platform to another, Automations played a critical role. Anthony built a workflow that identified users with access rights on the old platform and automatically moved them to the corresponding security groups on the new one, complete with tracking documentation.
“We have tracking documentation that says here’s the group we started from, here’s the one we finished on,” Brandon noted. What could have been a tedious, error-prone migration became a clean, auditable process.
Using AI to optimize existing workflows
RRCU is also leaning into ConductorOne’s AI capabilities. Anthony has been using ConductorOne’s Automations Architect to review workflows he’s already built, identify unnecessary steps, and find opportunities to streamline.
“I wanted to go into the options I’d previously built out and see if there’s anything I could make easier or more seamless,” Anthony said. “There’s a couple of steps I could take out or something I need to add. It’s been very helpful.”
For teams that have already invested in building automations, the Architect acts as a second set of eyes, helping you get more out of what you’ve already created by recommending improvements.
What’s next: HR integration and fully automated onboarding
RRCU’s next big milestone is integrating ConductorOne with Paylocity, their HR platform. Today, onboarding starts with a manual ticket. Someone submits the new hire’s name, address, and details through an external system, and IT takes it from there.
With Paylocity connected, the goal is to eliminate that manual handoff entirely. When a new employee is marked as hired in the HR system, ConductorOne will pick up that signal and trigger the full onboarding workflow automatically: creating user accounts, assigning access, and notifying the right people.
“That initial onboarding will be straight out of ConductorOne,” Brandon said. “We’re hoping to completely remove that ticketing system altogether.”
There’s even a practical quality-of-life win: no more misspelled names from data being passed through three different people.
The bottom line
RRCU’s story is a blueprint for what’s possible when an IT team fully commits to automation. In a matter of months, they went from manual, time-consuming identity workflows to a system that handles onboarding, offboarding, transfers, migrations, access reviews, and end-user communications, all with minimal manual intervention.
As Anthony put it: “It was self-explanatory and easy to work through.”
And as Brandon summed it up: “It’s hands down one of the best value adds we’ve had for a product that we’ve ever bought and purchased.”
If you’re ready to see what Automations can do for your team,book a demo to see them in action.
Stay in touch
The best way to keep up with identity security tips, guides, and industry best practices.
Explore more articles
Your Enterprise Needs an Immune System, Not a Better Firewall
Why IAM, IGA, and PAM Break in the Agentic Enterprise