Overview
Lifecycle management of an employee can lead to a number of loose ends regarding ownership and access to resources. This is especially true for privileged account access. This flow automates the process of changing ownership of an account to an active employee, and ensures the terminated employee is removed from the safe ASAP.
A webhook is triggered when the end date of an employee is set in the HR system. All accounts where said employee is the owner are collected. If the manager has a mobile device registered to Idira Identity, they will receive a notification about the pending termination. The manager of the employee is also provided a form via Slack to select a new owner for each account. After selecting the new owner for the account, the manager has the option to either immediately revoke account access of the leaving employee or wait until the end date.