Here’s a number worth sitting with: according to a 2025 industry survey cited by Enboarder, 88% of employees say their organization does a poor job of onboarding new hires. That’s not a niche problem. That’s the overwhelming majority of companies failing at the one process that determines how quickly a new hire becomes useful.

For a startup running at growth pace, the IT dimension of that failure is particularly expensive. A new hire who can’t log into their email on Day One, whose laptop arrives unconfigured three days after they start, or who spends their first week chasing down software access from whoever happens to answer their Slack message, that’s not an onboarding inconvenience. That’s a quantifiable cost sitting on your payroll without any corresponding output.

The fix isn’t complicated, but it does require building the right infrastructure before the first person walks in the door. Here’s how it works, and what the gap between manual and automated onboarding actually costs. You can also see how we approach this in practice on our small business employee onboarding page.

‍

What Does “Time-to-Productivity” Actually Mean, and Why Does It Matter?

Time-to-productivity is the period between a new hire’s start date and the point at which they’re performing at full expected output. Depending on role complexity, industry research suggests this ramp-up period runs anywhere from 90 days to eight months. But there’s a meaningful distinction between ramp-up time that’s inherent to the role, learning the product, the customers, the team, and ramp-up time that’s purely administrative drag.

Administrative drag is the days or hours a new hire spends waiting for things that should have been ready before they arrived. A laptop that needs to be set up manually. An email account that hasn’t been provisioned. Software licenses that nobody remembered to purchase. An access request sitting in someone’s queue because the right person is out of office.

This kind of delay is entirely preventable. It doesn’t teach the new hire anything about the job. It doesn’t build relationships. It just burns time at full salary cost while generating zero output. For a Series B company hiring at any meaningful velocity, the aggregate cost of that drag adds up fast.

A simple calculation: a $120,000-per-year employee costs roughly $58 per hour in base compensation alone. Two days of administrative onboarding delay, waiting for a laptop, accounts, and access, is approximately $920 in paid time with no output. Across 20 hires in a growth year, that’s over $18,000 in direct productivity loss before you factor in the cost of the IT staff time required to manually provision each person.

‍

The Most Time-Consuming Manual Onboarding Tasks

Manual IT onboarding is a coordination problem masquerading as a technical one. The technical work isn’t hard. What’s hard is making sure all of it happens in the right sequence, before the person starts, without anyone dropping a step. Here’s where the time actually goes:

• Device procurement and configuration. Someone has to order the laptop, wait for it to arrive, manually configure it, installing software, setting security policies, and enrolling it in device management. Then ship it to the new hire. Without a streamlined procurement channel and warehouse stock, this process alone can take one to two weeks.
• Account provisioning. Email, Google Workspace or Microsoft 365, Slack, HR system, expense management, project management, code repository, cloud infrastructure access, each one is typically a separate manual step, often involving a different admin, sometimes requiring a manager to approve. In companies without a formal onboarding checklist, accounts are created reactively as the new hire discovers they need access to something.
• Software licensing. Who holds the license pool? Is there a spare seat available, or does someone need to purchase a new one? Does the new hire’s role require specialized tools that aren’t part of the standard stack? These questions usually get answered ad hoc, during the first week, while the employee waits.
• Security enrollment. Getting the device enrolled in MDM, verifying encryption, confirming MFA is enabled, and checking that the device meets company security policy requirements is often done after the fact, if at all, in environments without automated onboarding.
• Offboarding cleanup from the prior hire. If the new hire is using a device that was previously assigned to someone else, that device needs to have been factory-reset, re-enrolled, and reconfigured. In companies without a formal device lifecycle process, this step is frequently incomplete.

The cumulative result: according to a 2026 analysis of IT onboarding costs, 43% of new hires have to wait more than a week just for their workstation and tools to be ready. That’s nearly half of all new employees starting their first week at a productivity deficit that has nothing to do with them.

‍

What Automated Employee Onboarding Actually Looks Like

Automation doesn’t mean removing humans from the onboarding process. It means removing humans from the parts of the process that don’t require human judgment, the repetitive, sequential steps that can be executed reliably by well-configured systems.

Here’s what a fully automated IT onboarding workflow looks like for a new hire at one of our clients:

‍

Two Weeks Before Start Date

HR submits the new hire’s details to us, name, role, start date, shipping address. That’s the entire HR action required. From that point, the process runs on its own. We confirm device type against the role profile, pull a pre-stocked device from our warehouse or order one if needed, and begin building the configuration profile.

‍

Three to Five Days Before Start Date

The laptop ships from our warehouse, pre-enrolled in the company’s MDM platform via Apple Business Manager or Windows Autopilot. All accounts are provisioned, email, Workspace, Slack, and any role-specific tools, before the device leaves our hands. Software licenses are confirmed. Security policies are embedded in the configuration profile.

‍

Day One

The new hire opens their laptop, connects to Wi-Fi, and signs in with their company credentials. The MDM platform recognizes the device, applies the configuration profile, and begins installing the required applications automatically. Within 30 to 45 minutes, the device is fully set up and the employee is in their tools. No IT intervention required. No setup instructions to follow.

One of our clients’ new hires described it as “the smoothest first-day experience I’ve ever had.” That’s not an accident, it’s the output of a process that was designed and tested before they arrived.

The contrast with manual onboarding is stark. The same outcome that takes three to five days of IT coordination in a manual process happens in under an hour with zero IT staff time on the day itself.

‍

What Automation Saves at Scale

According to SHRM research compiled by FirstHR, structured onboarding reduces time to full productivity by 50% or more, helping new hires reach competence in four to six months rather than eight to twelve. For a Series B company hiring 30 people in a year, that acceleration represents a meaningful compounding of productive output across the team.

But the math on automation savings is actually simpler than the productivity research. Consider the direct IT labor involved in manually onboarding a single employee:

• Device configuration: 2–3 hours
• Account provisioning across 8–10 systems: 1–2 hours
• Troubleshooting and follow-up during week one: 1–2 hours
• Total: 4–7 hours of IT staff time per hire

At a fully-loaded cost of $75–$100 per hour for IT labor, that’s $300–$700 per hire in direct IT cost for the onboarding process alone. For a company hiring 30 people a year, that’s $9,000–$21,000 in IT labor just for onboarding, before counting the productivity time the new hire loses waiting.

Automated onboarding reduces the IT labor component to roughly 15–20 minutes per hire for review and exception handling. The rest runs on the process.

‍

Automation Doesn’t Stop at the Laptop

The device is the most visible part of the onboarding problem, but it’s not the only one. A fully automated onboarding workflow also covers:

• Access scoping. Role-based access profiles mean the new hire gets exactly what they need and nothing more. An engineer gets developer tools and repository access. A finance hire gets the accounting system and expense platform. Access is applied automatically based on the role, not assembled manually by whoever is around that day.
• Security enrollment. MDM enrollment, encryption verification, MFA enforcement, and security policy compliance are all confirmed as part of the zero-touch provisioning flow. There’s no separate “security onboarding” step because it’s embedded in the device setup itself.
• Documentation and audit trail. Every provisioning action is timestamped and logged. When a SOC 2 auditor asks for evidence that only authorized devices accessed company systems and that all new hires were enrolled in MDM from their first day, the logs are already there.
• Offboarding the prior device. If the new hire is receiving a device that was previously used by a departed employee, our warehouse process ensures it was factory-reset, re-enrolled, and verified before it was reassigned. The new hire never receives a device with residual data or configuration from a prior user.

‍

The Coordination Problem Automation Solves

Manual onboarding fails not because people are careless but because it requires coordinating multiple parties , including HR, IT, the hiring manager, and sometimes finance for license purchases, across a compressed timeline, often while everyone involved is also doing their regular jobs.

Automation collapses that coordination requirement. HR sends one notification. Everything else runs on a pre-built process. The hiring manager doesn’t need to track down a laptop. IT doesn’t need to manually provision twelve accounts. The new hire doesn’t spend Day One in a holding pattern.

We’ve been building and refining these workflows since 1998. The specifics change as the tools evolve : Apple Business Manager, MDM platforms, identity providers. The underlying principle hasn’t: the more of the onboarding process that runs automatically, the less that can go wrong, and the faster the new hire contributes.

‍

Frequently Asked Questions

How does automating employee onboarding reduce time-to-productivity?

Automated onboarding eliminates the administrative lag between a new hire’s start date and the moment they have everything they need to work. Instead of waiting days for a configured laptop, active accounts, and confirmed software access, a new hire who goes through an automated provisioning workflow can be fully set up within an hour of powering on their device. The role-specific work of learning the job can start immediately, rather than after a week of IT coordination.

What are the most time-consuming manual onboarding tasks for IT teams?

The biggest time sinks are device configuration (manually installing software, applying security policies, and enrolling in device management), account provisioning across multiple systems, software license management, and security enrollment verification. Each of these is typically done as a separate manual step, often by different people, and any gap in the chain creates a delay that lands on the new hire.

What is zero-touch provisioning and how does it work for employee onboarding?

Zero-touch provisioning is a workflow where a new hire’s device configures itself automatically when powered on for the first time. The device is pre-enrolled in the company’s MDM platform before shipping. When the employee connects to Wi-Fi and signs in with their credentials, the MDM applies the configuration profile, installs required applications, and enforces security policies, all without IT intervention. It works for Mac, Windows, iPhone, iPad, Android, and Chromebook.

Does onboarding automation work for remote and distributed teams?

Yes, it’s actually where automation provides the most value. In an office setting, IT can walk someone through setup manually. For a remote hire in a different city or state, that option doesn’t exist. Zero-touch provisioning means the device configures itself regardless of where the employee is located. The same process works for a hire in San Francisco and a hire in Austin.

What happens to accounts and devices when an employee leaves?

A properly automated onboarding workflow has a corresponding offboarding workflow. When a departure is confirmed, accounts are revoked across all systems, the device’s managed container is wiped, and a return shipping label is sent to the employee. The device comes back to our warehouse, is factory-reset, and is prepared for the next hire. The offboarding process runs on the same principle as onboarding: a single trigger initiates a sequence of automated steps, minimizing the risk of a missed account or an unreturned device.

How much IT staff time does automated onboarding save?

Manual IT onboarding typically requires four to seven hours of IT staff time per hire, for device configuration, account provisioning, and first-week troubleshooting. Automated onboarding reduces this to roughly 15–20 minutes per hire for review and exception handling. For a company hiring 30 people in a year, that’s roughly 150–200 hours of IT labor recovered annually.

‍

If your current onboarding process depends on someone remembering to send a Slack message, the process has a single point of failure. Building it on automation means it runs the same way every time, regardless of who’s in the office that week.

‍