HardenHygiene

Leaver Access Revocation

Removes the sign-in, group membership and app grants on the leaver's last day and records the evidence.

Part of Joiner, mover and leaver access

Tools

Microsoft Entra ID, Okta, Jira Service Management, Slack

Outcomes

Sign-in blocked on the last day • App grants and sessions revoked • Revocation evidence saved

Documentation

Instruction-ready detail below

When <in:jira>a leaver record</in:jira> reaches its last day, block the sign-in, remove group and app grants in Entra ID and Okta, then <slack>confirm</slack> the closure in the offboarding channel.

Instruction file

When <in:jira>a leaver record</in:jira> reaches its last day, block the sign-in, remove group and app grants in Entra ID and Okta, then <slack>confirm</slack> the closure in the offboarding channel.

Setup requirements

Tools

Microsoft Entra ID, Okta, Jira Service Management, Slack

Trigger

When a leaver's last day passes

Setup time

25 minutes

Other automations in this workflow

Mover Device Handover

Wipes and re-enrols a device when someone changes role, so the previous owner's data does not travel with it.

Stale Account Sweep

Flags accounts with no sign-in for 45 days so a dormant contractor or old service account gets removed.

Starter Account Setup

Builds the starter's account bundle from the approved role template on their first morning.

Related workflows

Access reviews

Works the periodic entitlement list so access nobody still needs is released, and every decision is written down.

Privileged access review

Confirms every standing admin grant is still needed, and turns one-off elevation into a recorded, time-boxed grant.

Audit trails

Joins the scattered administrative change records into one timeline, so an auditor's question is a search rather than a fortnight of exports.

Download

Start with one instruction file.

Download the app and begin with drafts and checklists before you write anything back.

  • •Plain-language instructions
  • •Runs on your machine
  • •Works with your existing setup
  • •Reviewable activity history
Download