Offboarding auto-remediation (account deprovisioning)

The Offboarding agent helps you keep access clean and audit-ready by automatically deprovisioning accounts when personnel leave. It watches your HR system or Identity Provider (IdP) for termination events, then disables or removes access across connected tools so former team members do not retain access.

What the agent does

When an offboarding event is detected, the SecureSlate agent can:

Detect the event from an HR system (for example Workday or BambooHR) or an IdP directory change.
Identify the person across connected systems (email, username, external IDs).
Disable access (suspend, remove from groups, revoke sessions/tokens).
Deprovision accounts in connected platforms (where supported).
Collect evidence of actions taken (time, actor, systems updated).
Open a ticket when manual steps or approvals are required.

Supported systems (examples)

This workflow is commonly used to deprovision:

Password manager: 1Password
IdP / directory: Auth0, Google Workspace
Source control / CI: GitHub, GitLab, Bitbucket
Collaboration: Slack, Jira
Project tracking: ClickUp, Linear
Edge/security: Cloudflare

Run auto-remediation

Open the failing access or offboarding test.
On the SecureSlate AI can fix this card, click Auto Fix.
Review the systems the agent plans to update (and any required approvals).

Review and approve

Before changes are applied, you can review:

Accounts found per system (matched identities)
Actions planned (suspend vs remove vs token revoke)
Exceptions (contractors, shared accounts, service accounts)

Then choose:

Approve — The agent executes the deprovisioning plan and logs evidence.
Reject — Close without making changes.

Common policies you can enforce

Immediate suspension on termination events
Grace period for end-of-contract dates (optional)
Service account exemptions with ticketed justification
Break-glass accounts excluded but continuously monitored