Send new hire identities to provisioning endpoint before onboarding

Your new user accounts enter the identity directory without provisioning, causing delayed access and onboarding blockers. Provisioning teams get payloads to trigger access before day one.