PCC provisioning,
finally automated.
Staff changes shouldn't mean hours in the PCC admin portal. Credric connects to your existing identity source — Entra ID, Active Directory, CSV, or self‑service — and handles account creation, updates, and offboarding automatically.
Manual provisioning
doesn't scale
Every new hire, transfer, and termination means someone manually creating or updating accounts in PCC. In high-turnover healthcare environments, that adds up to hours of repetitive work every week — and delays that keep new staff waiting.
Automated Provisioning
Automatically create, update, and disable PCC accounts as staff changes happen. No manual data entry, no delays waiting on IT tickets.
Works With Your Infrastructure
Not every organization is in the cloud — and that's fine. Connect Entra ID via SCIM, sync from on-prem Active Directory, import CSV/Excel files, or use the REST API. Credric meets you where you are.
Approval Workflows
Route provisioning requests through configurable approval chains. Role-based or user-specific approvers with auto-approval timers.
Care Team Portal
Agency staff arriving in 20 minutes? No problem. Care team leads provision last-minute staff from pre-built templates with one click — no IT ticket, no waiting. Configure automatic access revocation by hours, shift end, or custom window so temporary accounts never linger.
Access Reviews
Run compliance campaigns that reconcile PCC users against your identity sources. Detect drift, orphaned accounts, and unauthorized access.
Bulk Import
Upload CSV or Excel files for batch provisioning. Column auto-detection, row-level validation, and progress tracking for thousands of records.
AD Agent Sync
Deploy an on-premises agent for bidirectional Active Directory synchronization. Group monitoring, OU management, and writeback support.
Enterprise Security
AES-256 encryption at rest, TOTP and email MFA, facility-scoped RBAC, session management, and API key controls. Built for healthcare.
Real-Time Dashboard
Monitor provisioning health, success rates, pending jobs, and upcoming revocations. Activity feeds and trend analysis at a glance.
Multi-Facility Management
Manage all your PCC facilities from a single dashboard. Facility-scoped permissions, per-facility settings, and organization-wide audit trails — all in one place.
Field Mapping Engine
Map source attributes to PCC fields with direct, concatenate, template, computed, and static rules. Conditional logic for complex transformations.
Notifications & Webhooks
Email alerts for provisioning events, password distribution, and manager notifications. HTTP webhooks for custom integrations.
Agency staff show up.
PCC access shouldn't be the holdup.
In senior living, agency staff are often brought in last minute — sometimes without formal processes and almost always without IT involvement. That leaves facility staff scrambling, and IT finding out after the fact that temporary accounts were created with no plan to remove them.
The Care Team Portal gives facility staff a controlled way to provision PCC access on the spot, with guardrails IT defines and full visibility into every account created.
Facility staff selects a template
A charge nurse or care team lead picks from pre-approved provisioning templates configured by IT. Each template defines the role, facility access, and permissions — no guesswork.
Access window is set
Choose a revocation window: 4 hours, 12 hours, end of shift, or a custom duration. When the window expires, Credric automatically disables the PCC account.
Account is provisioned in PCC
Credric creates the PCC account with the exact permissions defined in the template. The agency staff member is ready to chart within minutes of arriving on the floor.
IT stays in control. Facility staff stay unblocked.
IT defines the templates, permissions, and revocation policies. Facility staff use them. Every action is logged and auditable.
No IT ticket required
Agency staff often arrive outside of business hours. The Care Team Portal lets facility staff provision access on the spot — nights, weekends, holidays.
Full visibility for IT and compliance
Every account created through the portal is logged with who requested it, which template was used, when access was granted, and when it was revoked. Nothing happens in the dark.
Automatic revocation, every time
Temporary accounts are disabled automatically when the access window expires. No manual follow-up, no orphaned accounts, no audit findings from access that should have been removed weeks ago.
From identity source to PCC
in four steps
Replace the manual back-and-forth between spreadsheets, emails, and the PCC admin portal with an automated pipeline that works with whatever identity source you already have.
Connect Your Identity Source
Link Entra ID with SCIM auto-provisioning, deploy the AD Agent for on-premises sync, configure API keys for custom integrations, or simply upload a CSV.
- SCIM 2.0 with batch buffering
- On-prem Active Directory agent
- REST API with tenant-scoped keys
- CSV/Excel bulk import
Map Fields & Configure Rules
Define how source attributes translate to PCC fields. Use direct mappings, templates, concatenation, computed values, or conditional logic.
- 6 mapping rule types
- Conditional transformation logic
- Reusable provisioning templates
- Dry-run test harness
Validate & Approve
Every request passes through validation and optional approval workflows. Role-based or user-specific approvers with configurable auto-approval timers.
- Row-level field validation
- Configurable approval chains
- Auto-approval timers
- Manager notification alerts
Provision Automatically
Credric submits to PCC and tracks the async response. Users appear in PCC within minutes — with full audit trail.
- Automatic message construction
- Async response webhook handling
- Retry logic with circuit breaker
- Complete audit logging
Connect any identity source
Whether you're fully cloud-native with Entra ID or running on-prem Active Directory — or even managing everything in spreadsheets — Credric connects to what you already have. No infrastructure overhaul required.
Microsoft Entra ID
Real-time user provisioning and deprovisioning via SCIM. Automatic group-to-role mapping, attribute discovery, and batch buffering for high-volume orgs.
Active Directory
Deploy our lightweight agent for bidirectional AD sync. Monitor groups, manage OUs, and write back provisioned attributes to Active Directory.
CSV / Excel Import
Upload spreadsheets for batch provisioning. Auto-detect columns, preview data before processing, and track progress with row-level error reporting.
REST API
Full-featured REST API with 60+ endpoints. Tenant-scoped API keys, filtering, pagination, and webhook callbacks for custom integrations.
Care Team Portal
Built for last-minute agency staffing. Care team leads create PCC accounts on the spot from pre-approved templates — even at 2 AM when IT is offline. Set auto-revocation to 4 hours, 12 hours, end-of-shift, or any custom window. Accounts are automatically disabled when time expires.
Built for healthcare.
Secured by design.
Credric is engineered from the ground up for HIPAA compliance and enterprise security requirements. Every layer protects your organization's data.
AES-256 Encryption
All credentials, tokens, and sensitive data encrypted at rest with AES-256-GCM. Per-tenant encryption keys ensure complete data isolation.
Multi-Factor Auth
TOTP authenticator app support plus email-based one-time codes. Recovery codes for account access. Dual MFA for maximum protection.
Role-Based Access Control
Granular roles from organization admin to care team lead. Facility-scoped permissions restrict access to only relevant organizational units.
Complete Audit Trail
Every action logged with actor, IP, timestamp, resource, and full JSON details. HIPAA-grade 6-year retention with exportable CSV reports.
Access Reviews
Scheduled reconciliation campaigns compare PCC state against identity sources. Detect drift, orphaned accounts, and unauthorized access.
Data Isolation
Complete data isolation for your organization. Every query scoped to your account. Your data is never accessible to other organizations — by design, not by policy.
Session Management
HTTP-only cookies, absolute session lifetime, IP and user-agent tracking. No session tokens in API responses. Account lockout on failed attempts.
Auto-Revocation
Temporary access with automatic PCC account disabling. Template-based or per-user override windows. Scheduled cron enforcement.
Simple, transparent pricing
Every plan includes full PCC integration, encrypted credential storage, and full provisioning pipeline. No hidden fees.
Starter
For single-facility organizations getting started with automation.
- Up to 500 provisioned users
- 1 identity source (SCIM, CSV, or API)
- Manual + template-based provisioning
- Basic approval workflows
- Audit logging (1-year retention)
- Email support
- Standard dashboard & reporting
Professional
For multi-facility organizations requiring full automation.
- Up to 5,000 provisioned users
- All identity sources (SCIM, AD, CSV, API)
- Care Team Portal with auto-revocation
- Advanced approval chains
- Access review campaigns
- Active Directory agent included
- Field mapping engine with conditional logic
- Audit logging (3-year retention)
- Priority email & phone support
- Custom webhooks & notifications
Enterprise
For large healthcare networks with complex requirements.
- Unlimited provisioned users
- All Professional features
- Unlimited facility management
- SSO with Entra ID (OAuth2 PKCE)
- 6-year HIPAA audit retention
- Custom data retention policies
- Dedicated success manager
- Custom SLA
- White-glove onboarding
- API rate limit customization
Need a custom plan? Talk to sales
Frequently asked questions
Ready to automate
PCC provisioning?
See how Credric can give your IT team back the hours they spend on manual PCC account management — regardless of your infrastructure.