Food Production

800 Employees

Idahoan Falls, IA

They specialize in the production of dehydrated potato product.


The Idahoan Foods, LLC is a leading provider of dehydrated potato products. The core of the business began when the dehydration of potatoes began in World War II as a way of getting food safely to US personnel in different parts of the world. The Idahoan brand started in 1951 when a group of potato farmers joined together to form the business. They currently operate three production facilities in Idaho and source all of their fresh potatoes from growers within the state of Idaho. Each of these facilities washes, peels, cooks, and mashes the fresh potatoes. They also market and sell a line of hearty potato-based soups in the retail channel.

Due to the seasonal aspects of their business, the need to quickly and efficiently onboard and offboard personnel. In the past that has not worked well due to the disconnect between the HR system and Active Directory. They have been struggling to get team members up and running fast enough.

The Problem

They need to synchronize data from their Ultipro HR platform to Active Directory. Once a worker is onboarded into Ultipro, HR sends IT that data to create the relevant Active Directory (AD) account. They need a solution to sync the data from Ultipro over to Active Directory, and either make the new account or update existing accounts.

The goal is fast and efficient user onboarding/offboarding in Active Directory environments. In terms of sourcing the data, the solution can connect with any Oracle SQL back end. The solution can consume a flat file, an excel sheet, or a CSV file. It can use LDAP providers as a source as well as Active Directory. It can define what to do in a given job, provision new accounts, update existing records, disable a user when they have left and move them to a different Organizational Unit (OU), create a linked mailbox, and can delete a disabled account after a specific number of days.

The Solution

The best and most efficient path forward was to use GroupID Automate and Synchronize together to provide the customer with the capability to provision and de-provision users and contacts between their HR platform and Active Directory. GroupID Reports was added to give the customer a powerful, easy-to-use tool for viewing objects in their directory as well as global address lists. Each module specifically provides:

  • GroupID Automate

    • Automatically create, manage, and update all types of groups such as distribution lists, security groups, and MS 365 groups.
    • Dynamically maintain the group membership based on criteria from directory attributes or database queries.
    • Automatically nest group and populate their membership by establishing criteria that mimic the hierarchical nature of your organization.
  • GroupID Synchronize

    • Maintain accurate information by automatically synchronizing your AD and HR databases (including SQL, Oracle, and others).
    • Provision new user accounts in your directory and assigns them mailboxes, whether on-premise or in the cloud, with support for MS 365 and Google Apps.
  • GroupID Reports

    • A powerful, easy-to-use reporting tool that lets you view or print detailed reports on objects within your directory or global address list such as the number of groups, groups with no numbers, groups with no owners, etc.
    • Several standard, high-quality reports are included.

The Result

GroupID has transformed the Idahoan data, and onboarding to meet seasonal business demands is smooth and seamless. The delays and errors in getting workers into the system no longer exist. What used to take days only takes minutes now. Fields get synced from HR to AD, for example: if the HR fields are in all capital letters but they need them normalized, it can be done while provisioning a new user or updating an existing user. Also, if HR is adding abbreviations in the repository within Ultipro, the solution can break it down while syncing data to the destination. Another use case includes managing multiple forests. They can use Forest A as a template for Forest B, C, D, etc. while provisioning a user, mailbox, or a contact. In a hybrid environment, they can also provision an MS 365 license while onboarding a user in AD, thereby freeing up a license when they are disabling a user to ensure the Client can reuse that license accordingly.