To prepare for day zero onboarding in Workspace ONE Access, you configure the pre-hire authentication method, configure the API that creates the magic link used to access the New Hire Welcome page, and create a rule in the default access policy for pre-hire access.

In the Workspace ONE Access console, you enable the magic link option and configure settings for the length of time that the generated magic link is valid and the Active Directory pre-hire user group to use. You enable the pre-hire Token Auth Adapter authentication method in the Workspace ONE Access built-in identity provider.

To create the magic link, you configure a Workspace ONE Access API that creates the magic link. You add the link to the email that you send to a pre-hire user.

To create a rule for pre-hires to get one-time access to the magic link, you edit the Workspace ONE Access default access policy.