{"product_id":"n8n-offboarding-workflow-microsoft-365-entra-id-graph","title":"n8n Offboarding Workflow: Microsoft 365 + Entra ID + Graph","description":"\u003ch3\u003eOffboard Microsoft 365 users faster with an n8n Microsoft Graph workflow\u003c\/h3\u003e\n\u003cp\u003eThis \u003cstrong\u003en8n Offboarding Workflow\u003c\/strong\u003e performs a manual leaver process in \u003cstrong\u003eMicrosoft 365\u003c\/strong\u003e using \u003cstrong\u003eMicrosoft Graph\u003c\/strong\u003e: it disables the user in \u003cstrong\u003eEntra ID\u003c\/strong\u003e, revokes active sign-in sessions, optionally converts the mailbox to a shared mailbox via \u003cstrong\u003eAzure Automation\u003c\/strong\u003e, removes Microsoft 365 licenses, retires \u003cstrong\u003eIntune-managed devices\u003c\/strong\u003e, and emails a step-by-step audit report.\u003c\/p\u003e\n\n\u003ch3\u003eWhat this workflow does\u003c\/h3\u003e\n\u003col\u003e\n  \u003cli\u003e\n\u003cstrong\u003eManual trigger\u003c\/strong\u003e: Start the workflow and provide the leaver’s \u003cstrong\u003eUPN\u003c\/strong\u003e plus notification email details.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eResolve user in Microsoft Graph\u003c\/strong\u003e: Looks up the user and \u003cstrong\u003estops immediately\u003c\/strong\u003e if the UPN cannot be resolved.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eDisable the Entra ID account\u003c\/strong\u003e: Disables the user account via Microsoft Graph.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eRevoke sign-in sessions\u003c\/strong\u003e: Revokes the user’s active sign-in sessions using Microsoft Graph.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eOptional mailbox conversion\u003c\/strong\u003e: Calls an \u003cstrong\u003eAzure Automation webhook\u003c\/strong\u003e to run an \u003cstrong\u003eExchange Online PowerShell runbook\u003c\/strong\u003e that converts the mailbox to a \u003cstrong\u003eshared mailbox\u003c\/strong\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eRemove Microsoft 365 licenses\u003c\/strong\u003e: Removes all assigned licenses using Microsoft Graph.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eRetire Intune devices (optional)\u003c\/strong\u003e: Lists the user’s Intune-managed devices and sends a Microsoft Graph retire request for each device.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eEmail audit report\u003c\/strong\u003e: Builds a per-step outcome report and emails it using \u003cstrong\u003eMicrosoft Graph sendMail\u003c\/strong\u003e; marks execution as failed if any step reported an error.\u003c\/li\u003e\n\u003c\/ol\u003e\n\n\u003ch3\u003eUse cases\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003eAutomate offboarding checklists for SaaS operators who need consistent, auditable leaver handling.\u003c\/li\u003e\n  \u003cli\u003eReduce admin time by consolidating Entra ID + Microsoft 365 offboarding actions into one n8n workflow.\u003c\/li\u003e\n  \u003cli\u003eEnsure immediate access removal (session revocation) while coordinating mailbox and device handling.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eTechnical details\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eMicrosoft Graph\u003c\/strong\u003e via n8n \u003cstrong\u003eGeneric OAuth2 (client credentials)\u003c\/strong\u003e connection.\u003c\/li\u003e\n  \u003cli\u003eRequired app registration permissions: \u003cem\u003eUser.Read.All\u003c\/em\u003e, \u003cem\u003eUser.ReadWrite.All\u003c\/em\u003e, \u003cem\u003eUser.RevokeSessions.All\u003c\/em\u003e, \u003cem\u003eOrganization.Read.All\u003c\/em\u003e, \u003cem\u003eMail.Send\u003c\/em\u003e, \u003cem\u003eDeviceManagementManagedDevices.Read.All\u003c\/em\u003e, \u003cem\u003eDeviceManagementManagedDevices.PrivilegedOperations.All\u003c\/em\u003e.\u003c\/li\u003e\n  \u003cli\u003eWorkflow nodes\/logic: \u003cstrong\u003eif\u003c\/strong\u003e, \u003cstrong\u003eset\u003c\/strong\u003e, \u003cstrong\u003ecode\u003c\/strong\u003e, \u003cstrong\u003esplit out\u003c\/strong\u003e, \u003cstrong\u003esticky note\u003c\/strong\u003e, \u003cstrong\u003ehttp request\u003c\/strong\u003e.\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"N8N Commerce","offers":[{"title":"Default Title","offer_id":45862245204147,"sku":"N8N-18327","price":54.99,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0749\/6279\/6723\/files\/CdcYmSWGqDAacwrSpxD_d_11y9Efn8.png?v=1786957552","url":"https:\/\/buyflowscripts.com\/products\/n8n-offboarding-workflow-microsoft-365-entra-id-graph","provider":"N8N Commerce","version":"1.0","type":"link"}