Based on current analysis on worker offboarding, 70% of IT professionals say they’ve skilled the damaging results of incomplete IT offboarding, whether or not within the type of a security incident tied to an account that wasn’t deprovisioned, a shock invoice for sources that are not in use anymore, or a missed handoff of a vital useful resource or account. That is regardless of a median of 5 hours spent per departing worker on actions like discovering and deprovisioning SaaS accounts. Because the SaaS footprint inside most organizations continues to develop, it’s changing into exponentially tougher (and time-consuming) to make sure all entry is deprovisioned or transferred when an worker leaves the group.
How Nudge Safety will help
Nudge Safety is a SaaS administration platform for contemporary IT governance and security. It discovers each cloud and SaaS account ever created by anybody in your group, together with generative AI apps, providing you with a single supply of fact for departing customers’ accounts and OAuth grants that must be deprovisioned, revoked, or transferred.
And, a built-in playbook walks you thru a complete guidelines for IT offboarding in alignment with Google and Microsoft greatest practices. The playbook will help you save as much as 90 % of the effort and time concerned in SaaS offboarding by automating time-consuming, easy-to-miss duties like revoking OAuth grants and resetting passwords for accounts exterior of single sign-on (SSO).
Let’s check out how Nudge Safety helps you with every step so you’ll be able to guarantee full offboarding of SaaS accounts.
1. Revoke entry to Google Workspace or Microsoft 365
As soon as you’ve got chosen the worker you’ll want to offboard, step one is to confirm the standing of their Google or Microsoft account.
Initially, you will need the worker’s Google or Microsoft account to stay lively when you full different offboarding duties. Nevertheless, you will need to make certain the person can not entry the account by resetting their password and disabling any restoration strategies they might have arrange. Nudge Safety helps you confirm the standing of every of those steps so you’ll be able to be sure that entry has been revoked.
2. Switch possession of vital sources.
Earlier than you start deprovisioning your departing worker’s accounts, you will need to establish and transition possession of important sources like AWS root person accounts, company domains, social media accounts and extra.
Nudge Safety routinely identifies vital sources owned by your departing worker and guides you thru the best way to switch possession to different staff members. For every useful resource, Nudge Safety supplies detailed directions with useful hyperlinks and a abstract of different app customers who might take over accountability for every useful resource. As you undergo the checklist, you’ll be able to affirm that you’ve got transferred possession or log your resolution to disregard a specific useful resource that does not must be transferred.
3. Overview and replace app-to-app integrations.
OAuth grants are sometimes used to allow app-to-app integrations and automation so if a departing worker’s OAuth grants are revoked with out evaluate, this might disrupt day-to-day operations.
Nudge Safety reveals you all app-to-app OAuth grants and scopes for the departing worker so you’ll be able to assess the potential enterprise impression of every integration and decide if it must be recreated with one other account. You may additionally see who the opposite customers of that software are so you’ll be able to have interaction them as wanted. This step of the offboarding course of will assist be sure that automated enterprise processes proceed to work as anticipated after the worker leaves the group.
4. Revoke SSO-managed accounts.
This step is straightforward. With the clicking of a button (and with out leaving the Nudge Safety dashboard), you’ll be able to revoke entry to all the accounts managed by your single sign-on (SSO) supplier, like Azure AD or Okta. Afterward, the playbook may even stroll you thru cleansing up the contents of these accounts.
5. Revoke entry to apps authenticated through OAuth.
OAuth grants make it simple for workers to create new accounts just by selecting the choice to authenticate with Google Workspace or Microsoft 365. Nudge Safety makes it simply as simple for security and IT groups to establish and revoke departing customers’ OAuth grants immediately from Nudge Safety. Now that you have already reviewed and recreated any scopes associated to app-to-app integrations, you’ll be able to revoke the remaining app entry granted through OAuth.
6. Revoke entry to unmanaged accounts.
OAuth grants and SSO-managed accounts solely present a partial view of your departing worker’s entry. Lingering SaaS sprawl can go away doorways open for illegitimate entry to delicate sources and information after an worker leaves your group. Fortunately, Nudge Safety additionally inventories unmanaged accounts that your worker could have created with their work e-mail exterior of normal IT or procurement processes.
Not solely will Nudge Safety present you the checklist of unmanaged apps, however you’ll be able to set off automated password resets from inside the platform to stop additional entry by the departing worker. With out this automation, it might take hours to do that manually, if you happen to even know the accounts exist within the first place.
7. Clear up revoked accounts.
As soon as the person’s entry has been revoked, it is necessary to wash up their accounts to keep away from orphaning company information or persevering with to pay for unused licenses.
Nudge Safety lets you ship an automatic “nudge” to the technical or enterprise proprietor for every SaaS software with directions to delete or transfer delicate information, reallocate licenses, and reassign possession of sources to a different person.
8. Doc offboarding actions with a built-in report.
Nudge Safety information all the offboarding steps you’ve got taken, so you’ll be able to at all times return and test what was accomplished for every worker. As soon as you’ve got completed offboarding a departing worker’s SaaS and cloud accounts, you’ll be able to generate a .pdf report of the actions you accomplished and share it with inside customers or auditors.
Transition workers seamlessly with Nudge Safety
Nudge Safety helps you offboard departing customers effectively and fully, enabling you to guard company sources and keep away from enterprise disruptions with out wasting your time on tedious, repetitive duties.
Begin your free 14-day trial now.
