vs
HelloID
HR-driven provisioning
Identity and access management
ezOnboard vs HelloID for HR-driven provisioning
HelloID combines provisioning, access requests and sign-in in a cloud suite. ezOnboard focuses on HR-driven provisioning for Microsoft directories, with an agent on your network.
- Cheaper than HelloID
- Up to 31%
- Capabilities compared
- 14
- HelloID pages cited
- 17
- Sources checked
At a glance
The short version
ezOnboard connects HR to Active Directory, Entra ID and Exchange. Its agent keeps employee data on your network. Our product and team focus on joiners, movers and leavers, with dry runs, safety limits and alerts to help protect directory changes.
More on HR-driven provisioning and how ezOnboard syncs your HR system with Active Directory.
HelloID
HelloID is Tools4ever’s identity and access management suite, hosted on Microsoft Azure. Its four modules cover HR provisioning, access requests with approvals, SSO with MFA, and access reviews. Each is sold separately. With 200+ connectors, it fits teams that need provisioning, sign-in and access requests across many applications.1,4,2,7
Capabilities
ezOnboard and HelloID side by side
Compare features, with links to the original sources.
| Capability | HelloID | |
|---|---|---|
| What it is | HR-driven provisioning for Active Directory, Entra ID and Exchange. | A cloud identity and access management suite with four modules: Provisioning, Service Automation, Access Management, and Governance. Each can be bought on its own.1,4 |
| Where it runs | A Windows service on your network, configured and monitored through our hosted portal. | On Microsoft Azure in West US or West Europe. An optional agent uses three Windows services to run local actions and PowerShell.7,8,9 |
| Where employee data goes | HR records and directory updates stay on your network. Our portal doesn’t store employee personal data. | Raw personnel data is imported from HR into your HelloID tenant, which builds person records from it. You choose which fields are stored, in an encrypted database of your own.11,10,7 |
| On-premises Active Directory | Yes. The agent uses outbound connections only. No inbound firewall access is needed. | Yes, through its Active Directory connector and the on-premises agent. The agent connects outbound over HTTPS, with no inbound ports.12,8 |
| Entra ID and Exchange | Yes. One agent manages accounts, licenses, and mailboxes across your hybrid directory. | Yes. Its Entra ID connector uses the Microsoft Graph API. Mailboxes can be created in on-premises or hybrid Exchange, and Exchange Online is in its catalog.6,13,5 |
| Other directories and apps | No. ezOnboard manages Active Directory, Entra ID, and Exchange only. | 200+ connectors, including Google Workspace, Okta, TOPdesk, and ServiceNow, plus custom connectors written in PowerShell.2,5,4 |
| HR systems | 20+, including UKG, ADP, Workday, Paycor, Paylocity, BambooHR and Dayforce. We add unsupported systems during setup. | Sources include ADP, Workday, SAP SuccessFactors, UKG, BambooHR, Ceridian Dayforce, and Paylocity, plus student information and planning systems.5,4 |
| Preview before go-live | Preview changes across your workforce without updating accounts. | Preview account, access and group changes before enforcement, without applying them. Attribute mappings can also be previewed.14,4 |
| Limits on mass changes | Safety rails cap leavers, movers, and cleared attributes per run. A run that would cross one stops before it writes anything and alerts your team. | Count or percentage thresholds block grants, revokes or updates for review. Other types of changes continue.15 |
| Leavers | Disables accounts without deleting them. Runs stop if leavers would exceed your limit. | Revoking access disables the account. Revoking the account deletes it, or leaves it unmanaged if you turn deletion off.16,17 |
| Single sign-on and MFA | No. ezOnboard isn’t an identity provider and doesn’t change how people sign in. | Yes, in the Access Management module: SSO to cloud apps, MFA by SMS, email, or authenticator app, and access policies.1,4 |
| Self-service requests | No. Access follows the rules you set for each person’s HR record, and there’s no request catalog. | Yes, in the Service Automation module: a catalog for requesting access, approval workflows, helpdesk delegation, and PowerShell tasks.1,4 |
| Setup | We help install the agent, configure your rules and review a dry run. Setup can take as little as one week. | Implement it yourself, with a certified partner or with Tools4ever. Tools4ever says Provisioning often takes one day.3,2 |
| Pricing | Based on the number of employee records we sync. Quote on request. Up to 31% cheaper than HelloID. | Published, per module. On its US site, Provisioning is a flat $459.10 a month up to 199 users, then $2.45 per user per month from 200 users, falling to $1.61 at 1,000 users. The minimum term is three months.4 |
Choosing a product
Which one fits
Choose the product that fits your systems and team.
Choose ezOnboard if
- You want a lower cost. ezOnboard is up to 31% cheaper than HelloID.
- You use on-premises AD, alone or with Entra ID and Exchange Online, without needing SSO or an access request portal.
- Employee data must stay on your network. Our portal doesn’t store names, emails or employee IDs.
- You need accounts disabled, never deleted, with limits on bulk offboarding.
- You want our team to configure rules instead of building business rules and PowerShell scripts yourself.
- You want a product and team focused on HR-driven provisioning for Microsoft directories.
Choose HelloID if
- You need provisioning, single sign-on and MFA from one vendor.1,4
- You need an access request catalog, manager approvals and help desk delegation.1,4
- You need 200+ connectors or custom PowerShell connectors beyond Microsoft directories.2,5,4
- You need access recertification, orphaned account reconciliation and segregation of duties checks.1,4
- You need accounts from student information systems as well as HR.4,5
- You prefer published per-module pricing and a three-month minimum term.4
Moving over
Moving from HelloID to ezOnboard
We guide you through setup. Preview the changes before updating your directory.
01
Review your HelloID setup
List your source mappings, business rules and their conditions, Active Directory and Entra ID target mappings, post-action scripts, and thresholds. These become your ezOnboard rules and safety limits.
02
Install the agent and connect HR
We help install the agent on your server and connect your HR system. HelloID keeps running during setup.
03
Configure your rules
Our implementation team turns your business rules into rules for accounts, OUs, groups, attributes, licenses, and mailboxes, and sets your safety limits.
04
Preview changes across your workforce
Match HR records to existing accounts by employee ID or email. Preview changes without updating the directory. Compare the plan with the entitlements HelloID has granted and adjust the rules.
05
Switch over
Have HelloID stop managing the accounts in its Active Directory and Entra ID target systems without revoking them, then turn on ezOnboard’s automation, so only one system writes to your directory. HelloID’s other modules can keep running if you still need them.
Frequently asked questions
- What is HelloID?
- HelloID is a cloud identity and access management suite from Tools4ever. Its Provisioning module connects your HR system to accounts in systems such as Active Directory and automates joiners, movers, and leavers. Service Automation, Access Management, and Governance add self-service requests, single sign-on, and access reviews.
- How much does HelloID cost?
- Tools4ever publishes a price calculator for HelloID, in US dollars on its US site. Provisioning is a flat $459.10 a month up to 199 users, then priced per user per month in volume tiers, from $2.45 at 200 users to $1.61 at 1,000 users and $0.54 at the largest sizes. Service Automation, Access Management, and Governance are priced separately, Governance is 25% off its standard rate until the end of 2027, and the minimum term is three months. ezOnboard’s pricing is based on the number of employee records we sync, and it’s up to 31% cheaper than HelloID. Email sales@ezonboard.io for a quote.
- Where does HelloID process our employee data?
- In the cloud. HelloID imports raw personnel data from your HR system into your tenant, hosted on Microsoft Azure in a West US or West Europe region, and builds person records from it there. Each customer has its own encrypted database, and you choose which fields it stores. ezOnboard’s agent reads HR and writes to your directory inside your network.
- Does HelloID need an agent for on-premises Active Directory?
- Yes. Its Active Directory connector runs through the on-premises HelloID Agent, Windows services that connect outbound over HTTPS. For HR sources and PowerShell connectors, a cloud agent on Tools4ever’s cloud can run the same actions, and Tools4ever recommends it unless you need code to run on-premises.
- Can we use ezOnboard and HelloID together?
- Yes, as long as only one of them writes to your directory. ezOnboard can take over provisioning to Active Directory, Entra ID, and Exchange while HelloID keeps handling sign-in through Access Management and requests through Service Automation.
- How long does a move from HelloID take?
- Setup can take as little as one week, depending on coordination between your HR and IT teams. Review a dry run across your workforce before switching over.
Sources, checked
Claims about HelloID cite its website or marketplace listings, checked that month. Review the latest details before you choose.
- Tools4ever: HelloID, Cloud-based Identity and Access Management. https://www.tools4ever.com/software/helloid-cloud-identity-access-management
- Tools4ever: Why HelloID. https://www.tools4ever.com/why-helloid
- Tools4ever: HelloID Provisioning. https://www.tools4ever.com/modules/provisioning
- Tools4ever: HelloID modules and prices. https://www.tools4ever.com/helloid-prices
- Tools4ever: Integrations. https://www.tools4ever.com/connectors
- Tools4ever: Microsoft Entra ID connector. https://www.tools4ever.com/connectors/entraid
- HelloID Security product flyer (PDF). https://www.tools4ever.com/assets/helloid-flyer-security.pdf
- HelloID docs: Set up HelloID. https://docs.helloid.com/en/set-up-helloid.html
- HelloID docs: Agent. https://docs.helloid.com/en/agent.html
- HelloID docs: Provisioning Agent. https://docs.helloid.com/en/provisioning/provisioning-agent.html
- HelloID docs: Provisioning workflow. https://docs.helloid.com/en/provisioning/provisioning-workflow.html
- HelloID docs: Configure Agent (Active Directory target system). https://docs.helloid.com/en/provisioning/target-systems/active-directory-target-systems/configure-an-active-directory-target-system/configure-agent--active-directory-target-system-.html
- HelloID docs: Exchange (Active Directory target systems). https://docs.helloid.com/en/provisioning/target-systems/active-directory-target-systems/exchange.html
- HelloID docs: Evaluation. https://docs.helloid.com/en/provisioning/evaluation.html
- HelloID docs: Target system thresholds. https://docs.helloid.com/en/provisioning/enforcement/target-system-thresholds.html
- HelloID docs: Entitlement actions. https://docs.helloid.com/en/provisioning/enforcement/entitlement-actions.html
- HelloID docs: Configure account defaults (Active Directory target systems). https://docs.helloid.com/en/provisioning/target-systems/active-directory-target-systems/configure-account-defaults--active-directory-target-systems-.html
Get a demo
See ezOnboard with your HR system
Tell us about your HR system, directories and HelloID setup. We’ll tailor a demo to your needs. Or email sales@ezonboard.io.