Question

A large enterprise is redesigning its identity lifecycle process. Currently, help-desk staff manually create accounts when a manager emails a request, which has led to inconsistent attributes and accounts created before employment start dates. The IAM architect wants to ensure that identity records are trustworthy and that account creation is driven by verified employment events. Which change most directly addresses the root problem?

Accepted Answer

Designate the HR system as the authoritative source and trigger provisioning from validated HR onboarding records

Answer

Require managers to include multi-factor approval codes in their account request emails

Answer

Implement a quarterly access recertification review to remove improperly created accounts

Answer

Enforce a stronger password policy on all newly created help-desk accounts