--- title: "12% of employees rate their onboarding great; the laptop and logins are the fixable part" summary: "Gallup's onboarding numbers, TechBag's count of 16 identity governance and 12 device management tools, and what day one costs 50 people in India, September 2026." url: https://www.thetechbag.com/blog/employee-onboarding-best-practices-smbs-from-enterprise format: Analysis desk: "SaaS & business software" published: 2025-06-24 facts_checked: 2026-09-30 author: TechBag (The TechBag Journal) tags: ["employee onboarding","joiner-mover-leaver","identity governance","SSO","UEM","MDM","zero-touch enrolment","Okta","miniOrange","Scalefusion","Hexnode","Gallup","DPDP","CERT-In","GST"] cover: https://www.thetechbag.com/blog/covers/employee-onboarding-best-practices-smbs-from-enterprise.png --- # 12% of employees rate their onboarding great; the laptop and logins are the fixable part *Gallup's onboarding numbers, TechBag's count of 16 identity governance and 12 device management tools, and what day one costs 50 people in India, September 2026.* Analysis · SaaS & business software · By TechBag · Published 2025-06-24 · Facts checked 2026-09-30 · Canonical: https://www.thetechbag.com/blog/employee-onboarding-best-practices-smbs-from-enterprise The short version - The part of enterprise onboarding an SMB can copy cheaply is the first day: the HR record creates the accounts, and the laptop enrols itself. Culture and manager time are the other half, and no licence buys them. - Of the 16 identity governance products TechBag tracks, 12 automate joiners, movers and leavers in full; only 3 of those deploy in weeks, and those 3 are the ones an SMB should look at.[2] - Zero-touch device enrolment is decided when the laptop is bought, not when IT sets it up. A retail-bought device cannot be enrolled zero-touch without a wipe.[3] An earlier version of this piece asked what a small or mid-sized business could borrow from how large companies onboard people, and answered with a list of good habits: a plan, a buddy, a welcome, a feedback loop. Those habits still hold, and they cost nothing but attention. The question a growing Indian company actually brings to us is narrower and more expensive: when we hire our fortieth person, what do we have to buy so that they have a working laptop, the right logins and nothing they should not have, on the morning they join? That is the part of enterprise practice that is software, and it can be priced. ## Twelve per cent, and most of the rest is the manager The original post quoted three onboarding statistics. Only one of them traces to a dated primary source. Gallup reported in March 2019 that only 12% of employees strongly agree their organisation does a great job of onboarding new employees.[1] The same piece carries two numbers that matter more to a small company. When managers take an active role in onboarding, employees are 3.4 times as likely to strongly agree their onboarding was exceptional. And new employees typically take around 12 months to reach full performance in a role.[1] **Figure: The onboarding numbers that trace to a source say the manager matters most, and the job takes a year** *Gallup findings on onboarding, published March 2019; the latest Gallup figures we could find on this question* 12% Employees who strongly agree their organisation onboards new staff well Gallup, 2019 3.4× Likelihood of an exceptional rating when the manager takes an active role Gallup, 2019 ~12 months Typical time for a new employee to reach full performance Gallup, 2019 Source: Gallup, '7 Problems With Your Onboarding Program' · as of 1 March 2019 · US research; no comparable Indian figure was found The other two figures in the 2023 post, that 69% of employees are more likely to stay three years after great onboarding and that 20% of turnover happens in the first 45 days, are repeated on hundreds of vendor pages. We could not trace either to a dated original during this review, so they are gone. Our view Our view: the Gallup numbers split the problem cleanly. A twelve-month ramp and a 3.4× manager effect are management problems; software does not shorten either. What software does fix is the first week, when a new hire without a laptop or a login learns that the company was not ready for them. Spend money there, and spend the manager’s time on the other eleven months. ## What enterprises automate: four hand-offs from one record Large companies do not onboard better because they try harder. They onboard better because one record drives everything that follows. The HR system holds the joiner’s role and start date; an identity platform reads that record and creates the accounts; the device enrols itself on first boot; and at a set date someone confirms that the access still fits. Platforms such as ServiceNow’s HR Service Delivery sell exactly this as a cross-department journey, HR, IT and facilities as one flow.[5] **Figure: Enterprise onboarding is one HR record driving three automatic hand-offs and one human check** *The joiner chain as TechBag's identity and device guides describe it, September 2026* 1. 01HR record createdOffer accepted. The HRMS holds name, role, manager and start date. This is the only manual entry in the chain. 2. 02Accounts provisionedThe identity platform reads the record and creates the directory account, email and app seats by role, before day one. 3. 03Laptop enrols itselfA device bought through an approved channel enrols on first boot and pulls its policies and apps. No IT visit. 4. 04Day-90 access checkThe manager confirms what the new hire can reach. Moves and exits reuse the same chain in reverse. Source: TechBag identity governance guide; TechBag UEM and MDM guide; ServiceNow HRSD intel page · as of 30 September 2026 The last step is the one SMBs skip and auditors ask about. A joiner who becomes a mover keeps their old access unless something removes it; a leaver whose accounts were made by hand is removed by hand, from memory. The chain is as much about the exit as the entry. The habits in our 2023 list map onto this chain more neatly than they first appear. “Prepare equipment, access and software before the start date” is steps two and three. “Assign a buddy” and “check in during the first week” are what the manager does while the chain runs. “Gather feedback” is step four done properly: a short conversation at day 90 that covers both how the person is doing and whether what they can reach still matches the job. An SMB that runs those four steps from one record has copied most of what an enterprise onboarding programme does, at a fraction of the licence cost. ## The accounts: 12 tools automate the joiner; 3 deploy in weeks TechBag’s identity governance guide tracks 16 products and classes each on joiner-mover-leaver automation and on realistic implementation effort.[2] Twelve automate the full joiner-mover-leaver cycle, one does part of it, and three do not do it at all, because they are built for something else: data access, compliance reporting or identity recovery. TechBag countTechBag count Of the 12 full joiner-mover-leaver products, 3 are classed as weeks to implement (Okta Lifecycle Management, miniOrange Universal Directory, ManageEngine AD360), 5 as months and 4 as quarters. Three of the 16 publish a price: Okta Identity Governance at about US$9 to US$11 a user a month, Okta Lifecycle inside a bundle of about US$17, and ManageEngine AD360 modules from about US$595 a year. Counted from the guide as it stood on 30 September 2026.[2] **Figure: Only 3 of the 12 full joiner-mover-leaver tools are classed as weeks to deploy** *Products with full joiner-mover-leaver automation, by implementation effort class, September 2026* | | Products | | --- | --- | | Weeks | 3 | | Months | 5 | | Quarters | 4 | Source: TechBag identity governance guide (16 products, vendor-doc-verified 22 August 2026), TechBag count · as of 30 September 2026 For a company of 30 to 300 people the governance suites are the wrong purchase; they are sized for certification campaigns and segregation-of-duties rules that a regulated bank needs. The SMB version is a directory with single sign-on that provisions from the HR record. In the IAM guide, miniOrange publishes workforce identity from ₹180 a user a month and Okta’s Workforce Identity starts at about US$6.[4] Microsoft shops should check what their existing licence already includes before buying either. The question to put to any of them is not “do you support provisioning?”, which every vendor answers yes. It is “show me a joiner created from *our* HR system, end to end, in the trial”. An Indian SMB’s HR record usually lives in an Indian HRMS such as Keka, Zoho People or greytHR, and the connector to that system, not the identity product’s feature list, decides whether step two of the chain is automatic or a CSV someone uploads on Mondays. The guide records miniOrange’s directory as offering HR-driven joiner-mover-leaver automation, invoiced in INR; ask for the same proof from it as from Okta.[2] Our view Our view: below about 300 people, buy the directory and single sign-on first and make the leaver step automatic before the joiner step. A late account on day one costs a morning; an account left open after an exit is the one that turns up in an incident report. ## The laptop: zero-touch is decided at the till The second enterprise habit is that nobody images a laptop by hand. Apple’s automated device enrolment and Android zero-touch let a new device find its management server on first boot. The catch, stated plainly in TechBag’s UEM guide, is that both work only for devices bought through an approved channel; a retail unit cannot be enrolled zero-touch without a wipe.[3] The best practice is therefore a purchasing rule, not an IT one: buy the new hire’s laptop through a reseller that registers it to your company. **Figure: Six of the seven mixed-fleet tools print an entry price, from US$1.33 to US$8 a month** *Entry list price, US$ per device per month (Intune per user), tools managing Windows, Apple and Android, verified August 2026* ManageEngine Endpoint Central on-premises, sold per 50 devices; free to 25 US$1.33 Scalefusion UEM 10-device minimum; India-hosted US$2 Hexnode UEM 15-device minimum US$2.2 LogMeIn Miradore free plan below this US$3.3 42Gears SureMDM India-built US$3.99 Microsoft Intune per user; often already in Microsoft 365 US$8 | | Value (US$) | | --- | --- | | ManageEngine Endpoint Central | 1.33 | | Scalefusion UEM | 2 | | Hexnode UEM | 2.2 | | LogMeIn Miradore | 3.3 | | 42Gears SureMDM | 3.99 | | Microsoft Intune | 8 | Source: TechBag UEM and MDM guide, per-device price table (vendor pages read 22 August 2026) · as of 30 September 2026 · Entry tiers; the tier that manages your OS mix may cost more. miniOrange UEM is quote-only Seven of the 12 products in the guide manage Windows, Apple and Android together, which is what a typical Indian office with Windows laptops and a mix of phones needs.[3] The highlighted three are the ones we would shortlist for a company with no Microsoft licence that already includes Intune; the guide records Scalefusion and 42Gears as India-built with India-hosted data. Phones are the other half of the device question, and in most Indian SMBs they belong to the employee. Enterprises do not take over a personal phone; they enrol it in a separate work container. The guide’s BYOD scenario names Android work profile and Apple User Enrollment as the modes that keep the personal side untouched, and lists Intune, Scalefusion and Hexnode as the shortlist for it.[3] That is worth writing into the offer letter: the company manages the work profile and can wipe it; it cannot read the personal side and will not wipe it. A new hire told that on day one is far less likely to refuse the enrolment on day three. If you are buying this in India **What day one costs, for 50 people.** Using the published entry prices above: single sign-on and provisioning from miniOrange at ₹180 a user is ₹9,000 a month; device management from Hexnode or Scalefusion is about US$100 to US$110 a month at list, billed in dollars and invoiced in rupees through a reseller.[3][4] Add 18% GST to both. A software service bought directly from a foreign vendor is still taxable: a GST-registered business pays the 18% itself under reverse charge.[9] The HR system is a separate line; Indian HRMS vendors quote by headcount band, and we price it on request rather than print a number we have not checked this month. **The rules that bite.** An employee’s personal data is processed under the Digital Personal Data Protection Act, 2023, whose section 7(i) treats processing for the purposes of employment as a legitimate use that does not need fresh consent.[6] The DPDP Rules were notified on 13 November 2025, with the security-safeguard and breach duties in force from 13 May 2027.[7] CERT-In’s Directions of 28 April 2022 already require ICT system logs to be kept for 180 days within India and incidents reported within six hours, which is why a leaver’s accounts should close on the last day, with a log that shows it.[8] How we did this Figures as of 30 September 2026 The product counts are TechBag’s, taken from the identity governance guide (16 products) and the UEM and MDM guide (12 products) as they stood in the repository on 30 September 2026; the vendor facts in those guides were verified against vendor documentation on 20 to 22 August 2026. “Weeks, months, quarters” is the guide’s implementation-effort class, not a measured deployment time. Prices are entry-tier list prices as the guides record them, before GST and before any reseller discount. The Gallup figures are quoted from the article; the underlying survey is Gallup’s and is US-based. Two statistics in the 2023 original could not be traced to a dated primary source and were dropped. Nothing here is a TechBag customer result. Spotted an error? Write to us; corrections are published at the foot of the piece. Sources 1. [Gallup, '7 Problems With Your Onboarding Program', Ben Wigert and Ryan Pendell (12%, 3.4×, about 12 months to full performance)](https://www.gallup.com/workplace/247172/problems-onboarding-program.aspx) — 1 March 2019 2. [TechBag, Identity governance guide: 16 products by joiner-mover-leaver depth, effort class and published price](https://www.thetechbag.com/browse/identity-access/identity-governance) — vendor-doc-verified 22 August 2026; counted as at 30 September 2026 3. [TechBag, UEM and MDM guide: 12 products, per-device price table, and the approved-channel rule for zero-touch enrolment](https://www.thetechbag.com/browse/endpoint-management/uem-mdm) — prices verified 22 August 2026; counted as at 30 September 2026 4. [TechBag, IAM, SSO and MFA guide: miniOrange workforce identity from ₹180 a user a month; Okta Workforce Identity about US$6](https://www.thetechbag.com/browse/identity-access/iam-sso-mfa) — vendor-doc-verified 22 August 2026 5. [TechBag, ServiceNow HR Service Delivery intel page: cross-department onboarding journeys across HR, IT and facilities](https://www.thetechbag.com/servicenow/servicenow-hrsd) — page as at 30 September 2026 6. [Digital Personal Data Protection Act, 2023, section 7(i) (employment as a legitimate use)](https://www.meity.gov.in/data-protection-framework) — 11 August 2023 7. [Legismith Partners, DPDP Rules 2025 commencement timeline](https://legismith.com/dpdp-rules-2025-timeline/) — Rules notified 13 November 2025 8. [CERT-In, Directions under section 70B(6) of the IT Act, 2000 (six-hour reporting; 180-day logs within Indian jurisdiction)](https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf) — 28 April 2022 9. [India Briefing, Digital services in India: OIDAR, GST applicability and reverse charge](https://www.india-briefing.com/news/tax-digital-services-oidar-in-india-gst-applicability-and-compliance-22465.html) — updated 29 September 2023 **Disclosure.** TechBag is a software reseller: it earns a margin when a reader buys through it, including from vendors named here. The analysis is TechBag’s own; no vendor paid for or saw this piece before publication. Facts are labelled reported, TechBag count or our view. Go deeper on TechBag - [Identity governance guide](https://www.thetechbag.com/browse/identity-access/identity-governance) — 16 products by joiner-mover-leaver depth and implementation effort - [UEM and MDM decision guide](https://www.thetechbag.com/browse/endpoint-management/uem-mdm) — zero-touch enrolment, the approved-channel rule, and per-device prices - [Keka HR intel page](https://www.thetechbag.com/keka/keka-hr) — the India-built HRMS that holds the joiner record