November 16, 2023 at 07:00AM
Research shows that incomplete IT offboarding can have negative effects on organizations, leading to security incidents, surprise bills, and missed handoffs. Nudge Security offers a SaaS management platform that helps with IT offboarding by providing a single source of truth for deprovisioning accounts and automating tasks like revoking OAuth grants and resetting passwords. It also helps with transferring ownership of critical resources, reviewing and updating app integrations, and cleaning up revoked accounts. The platform records offboarding activities and generates reports.
Based on the meeting notes, it is clear that Nudge Security offers several features and benefits to help with the offboarding of employees and the management of SaaS accounts. Nudge Security is a SaaS management platform that provides a single source of truth for departing users’ accounts and OAuth grants that need to be deprovisioned, revoked, or transferred. Here are the key steps Nudge Security can assist with:
1. Revoke access to Google Workspace or Microsoft 365: Nudge Security helps verify the status of the employee’s Google or Microsoft account, allowing for the revocation of access by resetting passwords and disabling recovery methods.
2. Transfer ownership of critical resources: Nudge Security automatically identifies critical resources owned by the departing employee and provides guidance on transferring ownership to other team members, including detailed instructions and helpful links.
3. Review and update app-to-app integrations: Nudge Security shows all app-to-app OAuth grants and scopes for the departing employee, allowing for assessment of potential business impact and recreation of integrations with another account if needed.
4. Revoke SSO-managed accounts: With the click of a button, Nudge Security enables the revocation of access to all accounts managed by the single sign-on (SSO) provider, such as Azure AD or Okta.
5. Revoke access to apps authenticated via OAuth: Nudge Security simplifies the identification and revocation of departing users’ OAuth grants for app access authenticated via Google Workspace or Microsoft 365.
6. Revoke access to unmanaged accounts: Nudge Security inventories unmanaged accounts created by the departing employee with their work email outside of standard IT or procurement processes, allowing for automated password resets to prevent further access.
7. Clean up revoked accounts: Nudge Security facilitates the cleanup of revoked accounts by sending automated instructions to delete or move sensitive data, reallocate licenses, and reassign ownership of resources.
8. Document offboarding activities with a built-in report: Nudge Security records all offboarding steps and provides the ability to generate a .pdf report of completed activities for each employee.
Overall, Nudge Security offers an efficient and comprehensive solution for offboarding departing employees, ensuring the protection of corporate resources and avoiding business disruptions.