How can I automate user access revocation for offboarding?

Using n8n to build a workflow can make this process smoother. It allows you to automate user provisioning for both new hires and those leaving.

In my experience, since we operate within an Azure and Microsoft environment, I utilize PowerShell for our offboarding. When HR marks someone as terminated, I set their password to a random string, disable their account, convert their mailbox to a shared one, revoke licenses, and handle API calls to ensure their access is terminated across all tools. I even log everything to a SQL database to keep track of what was done.

If you have an integrated HR system like Siit, you can automate the entire workflow based on the termination date. This will ensure that all necessary actions are triggered automatically.

You should definitely look into Rundeck! At my workplace, we manage user access through LDAP/Active Directory groups. We just remove the user from the groups and create a ticket for auditing purposes after it's done.

You might want to consider building a custom workflow, or using a Mobile Device Management (MDM) and Identity Access Management (IAM) solution to automate this process. One example is Primo, which integrates with HR systems to handle on/offboarding automatically.