How IT teams automate contractor onboarding and offboarding with Rippling IT

What you'll learn

• How to connect background check data to app provisioning through access assignments and Supergroups

• How this automation improves compliance, security, and onboarding speed

• How to configure automated offboarding policies

What you'll need

• Rippling IT, which includes identity management, provisioning, and access control capabilities

• A connected background check provider (for example, Checkr or GoodHire) integrated through Rippling IT

• Defined contractor data, such as employment type and background check status, synced from your connected directory or HR system (for example, Google Workspace, Microsoft 365, an external HRIS, or Rippling’s HRIS)

The problem

Contractor onboarding and offboarding are some of the most time-consuming and risk-prone workflows for IT teams. Background checks often happen in one system, while app provisioning happens in another. Once a contractor is cleared, IT must manually create accounts in every app they’ll use (Google Workspace, Salesforce, Slack, Zoom, and more). When contractors leave, those same accounts have to be removed manually, often through disconnected checklists.

These manual processes not only waste time but also create compliance gaps and security risks if accounts are left active for contractors who are no longer authorized to access company systems.

The hypothesis

If teams connect background check data directly to identity and access controls in Rippling IT, they can fully automate how and when contractors receive access. By integrating your background check provider and defining smart rules through access assignments and Supergroups, Rippling IT can automatically provision and de-provision access across every connected app — based entirely on real-time background check status.

The solution

Rippling IT gives you a single platform to control contractor access from background check to offboarding, all in one place.

Here’s how it works:

1. Connect your background check provider. Rippling integrates directly with services like Checkr and GoodHire. Once connected, background check statuses — such as Pending, Cleared, or Not Eligible — sync automatically into Rippling.

2. Define smart access rules using Supergroups. Supergroups let you dynamically group people based on real-time attributes like employment type, background check, and department. When a contractor’s status changes, their group membership updates automatically.

3. Automate account provisioning through access assignments. With access assignments, you can tie those dynamic groups to your company’s app integrations. When a contractor’s background check clears, they are added to your defined Supergroup, and Rippling automatically creates accounts, assigns licenses, and grants access to every system they need. If their status changes or their contract ends, access is automatically revoked. For example, you might want your customer success team to have access to a custom set of apps. To do this, you could create a dedicated group for Employment Type = Contractor, Background Check = Cleared, Status = Active, and Department = Customer Success to automatically provision a specific set of tools like Salesforce Service Cloud, Slack, and Google Workspace.

4. Configure advanced offboarding actions. Rippling IT automates offboarding when a contractor’s status changes or their contract ends. Using offboarding policies tied to Supergroups, you can automatically manage access removal, data transfer, and email forwarding.

Together, these capabilities let IT teams manage contractor access at scale, without scripts, spreadsheets, or manual approvals.

The impact

✓ Contractors are granted access immediately once their background checks are cleared

✓ Manual provisioning and de-provisioning steps are eliminated

✓ Security and compliance are strengthened through automatic, attribute-based access control

With Rippling IT, access provisioning becomes policy-driven instead of manual. IT teams gain confidence that only authorized contractors can access company systems, and they can prove compliance with a clear, auditable access trail.

FAQs