Skip to content

Scalio Nexus Documentation

The single console for the complete employee lifecycle across Microsoft Entra ID and on-premises Active Directory.

Scalio Nexus is a hybrid identity lifecycle-management platform. It gives IT teams one clean, governed place to onboard, manage, and offboard people — writing changes to Microsoft Entra ID (Azure AD) via Microsoft Graph and to on-premises Active Directory through a secure, self-hosted PowerShell agent. Every action is validated, permission-scoped, fully audited, and safe by design (tracked workflows with automatic rollback).

Two deployment models

Scalio Nexus runs in either of two models. Most chapters apply to both; each chapter states which.

You run the container in your own environment and connect it to your Entra ID tenant using your own app registration + certificate. A guided Setup Wizard and a Connection Assistant (generate a certificate, run a PowerShell bootstrap, 1-click admin consent) make first-run quick — with a full Manual mode for power users.

The vendor hosts the app; each customer tenant connects with one-click admin consent against the central vendor application. There is no certificate to upload and no app registration to create — directory, sign-in and mailbox access are handled by the managed Scalio Nexus application.

Start here

  • Getting started

    First-run steps for both Self-Hosted and SaaS — from a fresh install to a connected console.

  • Administrator Guide

    Architecture, deployment models, the Setup Wizard, Microsoft connection, certificates, Cloud Sync, notifications, roles, licensing and troubleshooting.

  • User Guide

    Day-to-day use for operators and admins — signing in, roles, the dashboard, common tasks and notifications.

  • Troubleshooting

    Diagnose connection, consent and sync problems, with DEBUG tracing tips.

What you can do with Scalio Nexus

  • Employee lifecycle — guided onboarding, attribute & alias management, enable/disable, password reset, scheduled offboarding and deletion, and a searchable leaver archive.
  • Hybrid engine — real create/update/enable/disable/delete in on-prem AD via a queued, outbound-polling agent, coordinated with Entra Cloud Sync for end-to-end hybrid onboarding.
  • Objects & access — groups (cloud/on-prem/dynamic), Microsoft Teams, distribution lists, shared mailboxes, licenses (with auto-resume), applications, companies and reusable role templates.
  • Governance — every change is a tracked workflow with rollback, plus a complete, filterable audit log and fine-grained RBAC.
  • Notifications — Microsoft Teams + email (Exchange/Graph or SMTP), with per-event routing and a scoped least-privilege send policy.
  • Automation — directory sync, leave-date offboarding, drift detection & remediation, and digests.

Licensed add-ons

Some capabilities ship as separately-licensed add-ons (see Licensing):

  • HR Module — an authoritative HR system of record with a Joiners/Leavers dashboard, HR journeys, tasks, inventory and HR-scoped roles.
  • AI Assistant — a read-only, BYOK AI helper for summaries, failure/drift explanations and in-app help.
  • Partner Access Governance & JIT PAM — just-in-time, time-boxed, audited third-party access with a self-service partner portal (day-to-day flow in the user guide).

Conventions

  • Applies to labels on each chapter indicate Self-Hosted, SaaS, or Both.
  • Commands are shown in copy-ready code blocks.

Scalio Nexus — hybrid identity lifecycle management, done safely.