12% of employees rate their onboarding great; the laptop and logins are the fixable part

01Twelve per cent, and most of the rest is the manager

The original post quoted three onboarding statistics. Only one of them traces to a dated primary source. Gallup reported in March 2019 that only 12% of employees strongly agree their organisation does a great job of onboarding new employees.¹ The same piece carries two numbers that matter more to a small company. When managers take an active role in onboarding, employees are 3.4 times as likely to strongly agree their onboarding was exceptional. And new employees typically take around 12 months to reach full performance in a role.¹

The other two figures in the 2023 post, that 69% of employees are more likely to stay three years after great onboarding and that 20% of turnover happens in the first 45 days, are repeated on hundreds of vendor pages. We could not trace either to a dated original during this review, so they are gone.

02What enterprises automate: four hand-offs from one record

Large companies do not onboard better because they try harder. They onboard better because one record drives everything that follows. The HR system holds the joiner’s role and start date; an identity platform reads that record and creates the accounts; the device enrols itself on first boot; and at a set date someone confirms that the access still fits. Platforms such as ServiceNow’s HR Service Delivery sell exactly this as a cross-department journey, HR, IT and facilities as one flow.⁵

The last step is the one SMBs skip and auditors ask about. A joiner who becomes a mover keeps their old access unless something removes it; a leaver whose accounts were made by hand is removed by hand, from memory. The chain is as much about the exit as the entry.

The habits in our 2023 list map onto this chain more neatly than they first appear. “Prepare equipment, access and software before the start date” is steps two and three. “Assign a buddy” and “check in during the first week” are what the manager does while the chain runs. “Gather feedback” is step four done properly: a short conversation at day 90 that covers both how the person is doing and whether what they can reach still matches the job. An SMB that runs those four steps from one record has copied most of what an enterprise onboarding programme does, at a fraction of the licence cost.

03The accounts: 12 tools automate the joiner; 3 deploy in weeks

TechBag’s identity governance guide tracks 16 products and classes each on joiner-mover-leaver automation and on realistic implementation effort.² Twelve automate the full joiner-mover-leaver cycle, one does part of it, and three do not do it at all, because they are built for something else: data access, compliance reporting or identity recovery.

For a company of 30 to 300 people the governance suites are the wrong purchase; they are sized for certification campaigns and segregation-of-duties rules that a regulated bank needs. The SMB version is a directory with single sign-on that provisions from the HR record. In the IAM guide, miniOrange publishes workforce identity from ₹180 a user a month and Okta’s Workforce Identity starts at about US$6.⁴ Microsoft shops should check what their existing licence already includes before buying either.

The question to put to any of them is not “do you support provisioning?”, which every vendor answers yes. It is “show me a joiner created from our HR system, end to end, in the trial”. An Indian SMB’s HR record usually lives in an Indian HRMS such as Keka, Zoho People or greytHR, and the connector to that system, not the identity product’s feature list, decides whether step two of the chain is automatic or a CSV someone uploads on Mondays. The guide records miniOrange’s directory as offering HR-driven joiner-mover-leaver automation, invoiced in INR; ask for the same proof from it as from Okta.²

04The laptop: zero-touch is decided at the till

The second enterprise habit is that nobody images a laptop by hand. Apple’s automated device enrolment and Android zero-touch let a new device find its management server on first boot. The catch, stated plainly in TechBag’s UEM guide, is that both work only for devices bought through an approved channel; a retail unit cannot be enrolled zero-touch without a wipe.³ The best practice is therefore a purchasing rule, not an IT one: buy the new hire’s laptop through a reseller that registers it to your company.

Seven of the 12 products in the guide manage Windows, Apple and Android together, which is what a typical Indian office with Windows laptops and a mix of phones needs.³ The highlighted three are the ones we would shortlist for a company with no Microsoft licence that already includes Intune; the guide records Scalefusion and 42Gears as India-built with India-hosted data.

Phones are the other half of the device question, and in most Indian SMBs they belong to the employee. Enterprises do not take over a personal phone; they enrol it in a separate work container. The guide’s BYOD scenario names Android work profile and Apple User Enrollment as the modes that keep the personal side untouched, and lists Intune, Scalefusion and Hexnode as the shortlist for it.³ That is worth writing into the offer letter: the company manages the work profile and can wipe it; it cannot read the personal side and will not wipe it. A new hire told that on day one is far less likely to refuse the enrolment on day three.