Atlas project production

Frontline Substitute and Employee Account Lifecycle Automation

Syncs OCDE HR 2.0 employee and substitute data to Frontline nightly so Substitute Management and Absence Management account state, permissions, and credential-gated access stay aligned.

Internal-only entry. Do not publish externally without review.

Type: System
Lifecycle: Active
Last touched: 2026-03-24
Visibility: Internal

Purpose

Automate Frontline account lifecycle handling for substitutes and employees so access, permissions, and credential-gated readiness stay aligned without manual lag.

Current state

Production Integr8r jobs sync OCDE HR 2.0 data to Frontline nightly for both Substitute Management and Absence Management. The workflow manages account types, permissions, substitute requirements, skills, and credential-driven substitute access; substitute accounts are checked against the OCDE HR 2.0 Credentialing module so uncredentialed substitutes do not retain active Frontline access.

Next step

Document the exact scheduler, failure-notification path, credentialing exception handling, and approved use of the manual variant.

Interfaces

Inputs

OCDE HR 2.0 substitute and employee data
OCDE HR 2.0 Credentialing module status for substitute eligibility
Frontline import SQL templates

Outputs

EmployeeImport.csv
SubImport.csv
Frontline-ready import files
Updated account type, permissions, substitute requirements, and skill assignments

Reality to Action trace

Reality Ingestion

Contributes in this stage.

Canonical Storage

Not in scope.

Automation Engines

Contributes in this stage.

Human Interfaces

Not in scope.

Operational Adoption

Contributes in this stage.

Core workflow

TBD. Document the 5-10 steps that define the core workflow.

Data integrity and contracts

Source of truth rules

OCDE HR 2.0 is canonical for substitute and employee source data.
Frontline import files are generated target-state artifacts, not source-of-truth records.

Safe handling

Protect HR extracts and transfer credentials.
Limit access to generated import files and run logs.

Operational notes

Reliability posture

Integr8r logging and minimum-line checks reduce silent failures; the manual variant exists as a preserved operator path.

Observability

Integr8r run logs
minimum-line checks
generated import files

Security and privacy

Confidential staff employment and identity data; vendor transfer credentials must remain restricted.

Dependencies

Upstream

OCDE HR 2.0
OCDE HR 2.0 Credentialing module
Integr8r scheduler
secure transfer credentials

Downstream

Frontline Substitute Management account readiness
Frontline Absence Management employee account readiness
manual exception handling

Ownership

Owners

Technology Services, Josh Barton

Users

Technology Services, HR and substitute coordination, Josh Barton (owner)

Frontline Substitute and Employee Account Lifecycle Automation

Operational Notes

The registry identifies two production jobs: FrontlineAesop and FrontlineAesopManual.
The manual variant is enabled but batch-disabled, which suggests intentional operator use rather than abandonment.
Nightly sync covers both substitute and employee lifecycle handling, with substitute access further gated by active credential status.
Failure leads to delayed account readiness, stale permission state, or manual vendor intervention.

Registry Alignment

Mapped registry entry: INT-009
Registry clarified: the production path lives in Integr8r with both recurring and manual exception-oriented job variants, and the integration scope includes both substitute and employee account lifecycle handling.
Validation gaps: capture the Task Scheduler cadence, notification routing, business rules that govern manual reruns, and credentialing exception handling.