Skip to content
compliancebase

Joiner-mover-leaver (JML)

The identity lifecycle for provisioning, changing, and revoking workforce access.

In practice

JML is the HR-driven lifecycle that provisions, adjusts, and revokes access. Mature SaaS teams automate IdP changes from HRIS events and include contractors, not only full-time employees.

Common confusion

JML covers role changes as well as onboarding and offboarding.

Related controls

Framework versions referenced in this page:

Last verified: August 2026 · Primary sources linked above