Maintaining the confidentiality of data assets is crucial for every organization. Be it with business partners, third-party vendors, agents, or employees, the enterprises must revoke accessibility and delete the user accounts on time to prevent data theft. Across the employee journey, there may be ups and downs and thereby the accessibility of organizational assets must be activated and deleted accordingly.
In this success story, you can explore how our IAM experts automated the user account deletion and organizational unit movement by leveraging Okta Workflows & PowerShell scripts. We helped the client with a 360-degree user lifecycle management with best practices to avoid human intervention and overseeing.
Our client helps their customers with rent-to-own service for the key items like furniture, appliances, and electronics. They hold dedicated software to manage their HR operations.
So, they were in search of a team who has hands-on experience in handling Okta resources.
Continue Reading
Our solution to the client with the IAM Transformation service!
AVASOFT team analyzed the client’s IT infrastructure and their user de-provisioning business logic. Further, we understood their HR operations to automate the process of user hard deletion.
- Our IAM experts recommended the combined solution of Okta Workflow & PowerShell for the automated user deletion process in various platforms such as Okta, Active Directory, and O365.
- If the employee or agent is terminated or relieved, the Okta account of the user will be deprovisioned.
- Successively, the integrated active directory and O365 accounts will be disabled through agents and connectors by leveraging Okta Workflows.
- Further, the user profile will be included as a record in the hard deletion table with the creation and expiry dates.
- The PowerShell script is triggered periodically on regular intervals. If the users are terminated, the script will push their respective active directory account from the existing organizational unit to disabled organizational unit.
- We have deployed the customized PowerShell script to automate the process of user hard deletion. This PowerShell script retrieves the user profiles that have the current date as expiry date from the hard deletion table. Upon retrieval of records, the user accounts in Okta, active directory, and O365 will be deleted permanently.
- On successful user account deletion, the user profile will be deleted from the hard deletion table. If there are any errors in the process, the respective errors will be updated in the hard deletion table for break fixing.
- Right from de-provisioning user accounts to hard deletion, the entire workflow was automated using the customized Okta Workflow & PowerShell script solution.
Business gains for the client
- Our client experienced a 65% reduction in efforts in the user de-provisioning process.
- They could easily revoke the accessibility of Okta, active directory and O365 user accounts without any manual efforts.
- HR and IT teams could focus on critical tasks than manual Okta user movements.
- They had no more hassles of manual user account deletion and de-provisioning.
Tech stack
- AWS Lambda
- Okta Workflows
- Okta
- PowerShell
- HRMS
We can take up the hectic identity lifecycle management part for you!
Our IAM experts can build the customized identity lifecycle management for your enterprise right from square one or remediate the existing system based on your business needs. With our customized identity solutions, your IT teams could slash the manual efforts and could focus on potential tasks.
Do you face similar issues in user lifecycle management? What are you waiting for?
Our IAM experts are on their wings to assess and help you build the best user lifecycle management workflows for your platforms!
